QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-3758

Back to search

CVE-2025-3758

Published: May 8, 2025

Modified: Oct 3, 2025

PUBLISHED

Description

WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password. The vendor was contacted early about this disclosure but did not respond in any way.

VendorProductVersions

Netis Systems

WF2220

affected
1.2.31706

Weaknesses (CWE)

CWE-306
CWE-256

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now