PT-2026-5843 · Netis · Netis E1+

Besim Altinok · Published 2026-02-03 · Updated 2026-02-03 · CVE-2020-37093

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis E1+ version 1.2.32533

Description An information disclosure issue exists that allows unauthenticated attackers to retrieve WiFi passwords. Attackers can send a GET request to the ''netcore get.cgi'' endpoint to extract sensitive network credentials, including SSID and WiFi passwords, in plain text. The netcore get.cgi endpoint is the point of access for this information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2020-37093

Affected Products

Netis E1+

References · 5

• 🔥 https://exploit-db.com/exploits/48384 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37093 · Security Note
• https://t.me/CVEtracker/43647 · Telegram Post
• https://vulncheck.com/advisories/netis-e-unauthenticated-wifi-password-leak · Note
• http://netis-systems.com · Note