CVE-2023-38829: Netis-Systems WF2409E Firmware

High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days.

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.

Affected products

• Netis-Systems WF2409E Firmware: version 3.6.42541 only

Published 2023-09-11. Last modified 2026-06-17.