CVE-2025-2919: Netis WF-2404 UART hardware allows activation of test or debug logic at runtime
A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unknown code of the component UART. The manipulation leads to hardware allows activation of test or debug logic at runtime. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2919?
CVE-2025-2919 has been declared as critical.
How does CVE-2025-2919 affect the Netis WF-2404?
CVE-2025-2919 affects the UART component, allowing for unauthorized activation of test or debug logic at runtime.
What types of attacks can be launched due to CVE-2025-2919?
CVE-2025-2919 allows for potential attacks that manipulate the hardware to exploit debug and test functionalities.
Who is affected by CVE-2025-2919?
CVE-2025-2919 specifically affects users of the Netis WF-2404 router.
How can I mitigate the risks associated with CVE-2025-2919?
To mitigate the risks of CVE-2025-2919, ensure your device firmware is updated to the latest version provided by the manufacturer.