CVE-2019-19356

netis-systems wf2419 firmware

Published 7 Feb 2020 · updated 17 Jun 2026 · Analyzed

7.5 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 3 Nov 2021, with a remediation deadline of 3 May 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.

References

packetstormsecurity.com/files/156588/Netis-WF2419-2.2.36123-Remote-Code-Execution.html · Exploit, Third Party Advisory, VDB Entry
github.com/shadowgatt/CVE-2019-19356 · Exploit, Third Party Advisory
www.digital.security/en/blog/netis-routers-remote-code-execution-cve-2019-19356 · Exploit, Third Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-19356 · US Government Resource