Live › vulnerability › CVE-2019-19356
Go to dashboardNetis WF2419 wireless routers contain an unspecified flaw in the web management page. An attacker can run code as root on the router, which is in CISA's known-exploited list.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Netis WF2419 Devices | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the vendor firmware update per CISA guidance; no fixed version is named in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.
This page as .md · .json · in your agent: get_signal("CVE-2019-19356")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.