Unauthorized Access to Device Configuration in WF2220 by a Major Vendor
CVE-2025-3758

8.7HIGH

Key Information:

Vendor

Netis Systems

Status
Wf2220
Vendor
CVE Published:
8 May 2025

What is CVE-2025-3758?

The WF2220 device is vulnerable due to an exposed endpoint at /cgi-bin-igd/netcore_get.cgi. This oversight allows unauthorized users to access the device's configuration, which includes sensitive information such as cleartext passwords. Despite prior communication with the vendor regarding this issue, there has been no response or indication of remediation efforts, placing users at significant risk of unauthorized access to their network settings.

Affected Version(s)

WF2220 1.2.31706

References

https://cert.pl/posts/2025/05/CVE-2025-3758
third-party-advisory
https://cert.pl/en/posts/2025/05/CVE-2025-3758
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kamil Szczurowski
.