CNNVD-202602-220 Information
Feb 03, 2026
cve
CNNVD ID
CNNVD-202602-220
Related CVE
- CNNVD Published: 2026-02-03
Description (Chinese)
Netis E1+是中国天旦（Netis）公司的一个无线信号放大器。 Netis E1+ 1.2.32533版本存在安全漏洞，该漏洞源于信息泄露漏洞，攻击者可向netcore_get.cgi端点发送GET请求，可能导致以明文形式提取包括SSID和WiFi密码在内的敏感网络凭据。
Description (English)
Netis E1+ is a wireless signal amplifier of Netis. Netis E1+1.2.32533 has a security loophole, which stems from a leaking information that can be sent to the Netcore get.cgi endpoint by the attackers, which could lead to the explicit extraction of sensitive network documents, including SSID and WiFi passwords.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
天旦
Published
2026-02-03
Last Modified
2026-02-24
References
http://www.netis-systems.com https://www.exploit-db.com/exploits/48384 https://www.vulncheck.com/advisories/netis-e-unauthenticated-wifi-password-leak
Share on: