cvedb.io
CVE-2025-45835
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-05-12T14:15:26.003 · Last modified 2026-06-17T09:25:44.860

Summary

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.

Affected products

netis-systems — wf2880_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when netis-systems ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.