CVE-2019-19356NVD

Vulnerability Summary

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.

Severity Level

UNKNOWN

Published Date

Feb 7, 2020

Last Modified

Oct 21, 2025

Exploitation Status

ACTIVE

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

N/A

Affected & Patched Versions

Affected Versions

n/a n/a >= n/a

Patched Versions

Not provided by cveorg for this CVE.

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.