CVE-2021-26747
9.8 criticalEPSS 55%
Critical (9.8) in netis-systems. EPSS 55% chance of exploitation in the next 30 days.
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 55% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netis-systems:wf2411_firmware
- netis-systems:wf2780_firmware
References
Check your stackJSON