cvedb.io
CVE-2025-50635
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-08-13T15:15:34.743 · Last modified 2026-06-17T09:35:13.413

Summary

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.

Affected products

netis-systems — wf2780_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when netis-systems ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.