Netis Wifi6 Router NX10 CVE-2024-48456
HIGHVulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS 7.5, EPSS 81.3%. Netis routers are widely deployed in APAC markets. The broad range of affected models and firmware versions means a large attack surface. Memory disclosure from routers can expose credentials for the entire local network. |
| Exploit ScenarioDerived | An attacker on the same network sends crafted requests to a Netis router's web interface. The out-of-bounds read returns memory contents including the WiFi PSK, admin credentials, and connected device information. The attacker uses the WiFi PSK to join the network from outside and the admin credentials to modify DNS settings for traffic interception. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 28, 2026
Multiple Netis WiFi router models contain an out-of-bounds read vulnerability that allows remote unauthenticated attackers to extract sensitive information from device memory. The affected models span the WiFi 6 NX10, WiFi 11AC NC65/NC63/NC21, and WiFi MW5360 product lines across multiple firmware versions.
Earlier versions of this analysis (1)
Out-of-bounds read vulnerability across multiple Netis router models allows unauthenticated remote extraction of sensitive memory contents.
RemediationAI
Update to the latest firmware from Netis. Disable remote management access. Restrict management interface access to wired connections only. Change default admin credentials and WiFi passwords.
Affected ProductsAI
Netis NX10 2.0.1.3643/2.0.1.3582 Netis NC65 3.0.0.3749 Netis NC63 3.0.0.3327/3.0.0.3503 Netis NC21 3.0.0.3800/3.0.0.3500/3.0.0.3329 Netis MW5360 1.0.1.3442/1.0.1.3031
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability allows remote attackers to read beyond intended buffer boundaries in the router's web server process. The leaked memory can contain WiFi credentials, admin passwords, session tokens, and network configuration data. The attack requires no authentication and can be executed by any device with network access to the router's management interface.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the parameter password at the change admin password page at the router web interface.
Executive ViewAI
CVE-2024-48456 presents notable security risk, a out-of-bounds read vulnerability rated CVSS 7.5. Exploitation could compromise the security of affected deployments. With an EPSS score of 81%, this vulnerability faces very high likelihood of exploitation. Organizations should apply vendor updates when available and consider compensating controls in the interim.
Apply vendor patch. If immediate patching is not feasible: (1) Implement network-level access controls to limit exposure; (2) Enable enhanced monitoring and alerting; (3) Apply principle of least privilege.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Exploit-DB