CVE-2019-19356: Netis WF2419 Devices Remote Code Execution Vulnerability
First published: Fri Feb 07 2020(Updated: )
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netis WF2419 Devices | =1.2.31805 | |
| Netis WF2419 Devices | =2.2.36123 | |
| Netis-systems Wf2419 | ||
| Netis WF2419 Devices | ||
| All of | ||
| Any of | ||
| Netis-systems Wf2419 Firmware | =1.2.31805 | |
| Netis-systems Wf2419 Firmware | =2.2.36123 | |
| Netis-systems Wf2419 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-19356?
CVE-2019-19356 is a vulnerability that allows authenticated remote code execution as root through the router Web management page on Netis WF2419 Devices.
What is the severity of CVE-2019-19356?
CVE-2019-19356 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2019-19356?
CVE-2019-19356 affects firmware version V1.2.31805 and V2.2.36123 of the Netis WF2419 Devices.
How can I exploit CVE-2019-19356?
To exploit CVE-2019-19356, you need to establish an authenticated connection to the router Web management page.
Is there a fix for CVE-2019-19356?
To fix CVE-2019-19356, it is recommended to update the firmware of the Netis WF2419 Devices to a secure version.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/description
- agent/title
- agent/severity
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/netis-systems
- canonical/netis wf2419 devices
- version/netis wf2419 devices/1.2.31805
- version/netis wf2419 devices/2.2.36123
- canonical/netis-systems wf2419
- vendor/netis
- canonical/netis-systems wf2419 firmware
- version/netis-systems wf2419 firmware/1.2.31805
- version/netis-systems wf2419 firmware/2.2.36123