CVE-2025-2919
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Published Mar 28, 2025
Updated: Apr 17, 2025
CWE ID 489
CWE ID 1313
Summary
CVE-2025-2919 is a critical vulnerability identified in the Netis WF-2404 1.1.124EN device. This issue impacts the UART component, which contains unknown code that can be manipulated to activate test or debug logic at runtime. The exploitation of this vulnerability allows attackers to launch an attack on the physical device, making it a serious security concern. The vulnerability has been disclosed to the public, and although the vendor was contacted, they have not responded or taken any action to address the issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.