CVE-2025-1617

Summary

CVE-2025-1617 is a recently disclosed vulnerability affecting the Netis WF2780 2.1.41925 firmware. This issue, classified as problematic, lies within the Wireless 2.4G Menu component. A cross-site scripting (XSS) vulnerability is present, allowing attackers to inject malicious code by manipulating the SSID argument. Remotely executing these attacks is possible, increasing the risk to affected systems. Despite early disclosure, the vendor has yet to respond to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.