What is the severity of CVE-2025-2921?

CVE-2025-2921 is classified as a critical vulnerability.

How do I fix CVE-2025-2921?

To fix CVE-2025-2921, change the default password for the device and ensure secure configurations.

What causes the vulnerability CVE-2025-2921?

CVE-2025-2921 is caused by the manipulation of input that leads to the use of a default password in the device's software.

Which devices are affected by CVE-2025-2921?

CVE-2025-2921 affects the Netis WF-2404 model running version 1.1.124EN.

What type of attack can be executed due to CVE-2025-2921?

Due to CVE-2025-2921, an attacker can launch unauthorized access attacks on the physical device.

Vulnerability/
CVE-2025-2921

medium

6.4

CWE

1393

EPSS

0.011%

28/3/2025

17/4/2025

CVE-2025-2921: Netis WF-2404 passwd default password

First published: Fri Mar 28 2025(Updated: )

A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the file /etc/passwd. The manipulation with the input Realtek leads to use of default password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Credit: cna@vuldb.com

Affected Software	Affected Version	How to fix
Netis Wf-2404 Firmware
All of
Netis Wf-2404 Firmware	=1.1.124en
Netis WF-2404

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2025-2921?
CVE-2025-2921 is classified as a critical vulnerability.
How do I fix CVE-2025-2921?
To fix CVE-2025-2921, change the default password for the device and ensure secure configurations.
What causes the vulnerability CVE-2025-2921?
CVE-2025-2921 is caused by the manipulation of input that leads to the use of a default password in the device's software.
Which devices are affected by CVE-2025-2921?
CVE-2025-2921 affects the Netis WF-2404 model running version 1.1.124EN.
What type of attack can be executed due to CVE-2025-2921?
Due to CVE-2025-2921, an attacker can launch unauthorized access attacks on the physical device.

agent/title
agent/references
agent/weakness
agent/type
agent/first-publish-date
agent/description
agent/author
agent/severity
agent/source
agent/event
collector/mitre-cve
source/MITRE
collector/epss-latest
source/FIRST
agent/epss
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
vendor/netis
canonical/netis wf-2404 firmware
vendor/netis-systems
version/netis wf-2404 firmware/1.1.124en
canonical/netis wf-2404

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.