CVE-2020-37093: Netis Systems Co., Ltd Netis e1+

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve WiFi passwords through the netcore_get.cgi endpoint. Attackers can send a GET request to the endpoint to extract sensitive network credentials including SSID and WiFi passwords in plain text.

Affected products

• Netis Systems Co., Ltd Netis e1+: version 1.2.32553 only

Published 2026-02-03. Last modified 2026-06-17.