What is CVE-2025-3758?

CVE-2025-3758 is a vulnerability in Netis Systems Wf2220, classified under Plaintext Storage of a Password. Published 2025-05-08.

Is CVE-2025-3758 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Netis Systems Wf2220

CVE-2025-3758

WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

Affected products

Netis Systems Wf2220 — versions 1.2.31706

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password
CWE-306 — Missing Authentication for Critical Function

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cvd@cert.pl (third-party-advisory)
cvd@cert.pl (third-party-advisory)

Frequently asked questions

What is CVE-2025-3758?: CVE-2025-3758 is a vulnerability in Netis Systems Wf2220, classified under Plaintext Storage of a Password. Published 2025-05-08.
Is CVE-2025-3758 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.