CVE-2019-19356 - CVE House
Back to Database
Status published Unknown CVE-2019-19356

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE)...

Vulnerability Description

Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19356

Credits & Attribution

No credits recorded in the NVD database.

References

More from netis-systems

View All →
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter...
Critical 9.8
CVE-2020-8946
Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute...
High 8.8
CVE-2019-8985
On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx...
Critical 9.8
CVE-2019-20076
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username...
Medium 6.1
CVE-2019-20075
On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic)....
Medium 6.1

Affected Vendor

netis-systems

View all reports →

Affected Software

wf2419 firmware
Vulnerable Versions:
1.2.31805, 2.2.36123

Timeline

Official Publish: February 7th, 2020
Last Modified: October 21st, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.