Eap930
Monthly
Netis EAP930 access point firmware (build 1.250905.115454) ships a hidden backdoor in the /cgi-bin/debug CGI endpoint, where the return200 function activates concealed functionality when the SIGNATURE argument is manipulated with a specific value. The defect is remotely reachable over the network but is a constrained threat rather than a broadly exploitable one: the assessed vector (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) requires a high-privilege context and a non-trivial barrier - knowing or forging the correct SIGNATURE - and the vendor itself rates exploitability as difficult. The CVSS v4 vector carries an E:P (proof-of-concept) exploit maturity rating, but no confirmed active exploitation or CISA KEV listing was identified at time of analysis, and Netis did not respond to the disclosure, so no vendor-released patch has been identified.
Netis EAP930 access point firmware (build 1.250905.115454) ships a hidden backdoor in the /cgi-bin/debug CGI endpoint, where the return200 function activates concealed functionality when the SIGNATURE argument is manipulated with a specific value. The defect is remotely reachable over the network but is a constrained threat rather than a broadly exploitable one: the assessed vector (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) requires a high-privilege context and a non-trivial barrier - knowing or forging the correct SIGNATURE - and the vendor itself rates exploitability as difficult. The CVSS v4 vector carries an E:P (proof-of-concept) exploit maturity rating, but no confirmed active exploitation or CISA KEV listing was identified at time of analysis, and Netis did not respond to the disclosure, so no vendor-released patch has been identified.