Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-37093 1 Netis-systems 1 Netis E1+ 2026-02-04 7.5 High
Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve WiFi passwords through the netcore_get.cgi endpoint. Attackers can send a GET request to the endpoint to extract sensitive network credentials including SSID and WiFi passwords in plain text.
CVE-2020-37092 1 Netis-systems 1 Netis E1+ 2026-02-04 7.5 High
Netis E1+ version 1.2.32533 contains a hardcoded root account vulnerability that allows unauthenticated attackers to access the device with predefined credentials. Attackers can leverage the embedded root account with a crackable password to gain full administrative access to the network device.