What’s Vulnerable › Vulnerabilities

CVE-2023-38829

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-09-11 · updated 2026-06-17
• Weakness: CWE-77

Description

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.

Affected products

• Netis-Systems Wf2409E Firmware: 3.6.42541

References

• https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E
• https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E

Get alerted when CVE-2023-38829 or the next vulnerability affects your stack