CVE-2019-19356VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2019-19356: Netis WF2419 Devices Remote Code Execution Vulnerability

Affects Netis WF2419 DevicesSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 28.2% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-19356 (opens in a new tab)

Description

Netis WF2419 devices have a remote code execution vulnerability that allows attackers to execute arbitrary code as root via the router's web management interface. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

CVE-2019-19356 describes a remote code execution vulnerability in Netis WF2419 devices. The flaw enables an attacker to gain root-level code execution through the device's web management page. The vulnerability is categorized under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). Exploits have been observed in the wild, indicating active threat. No vendor advisory or patch information is available in the provided data.

Impact

Successful exploitation allows an attacker to execute arbitrary commands with root privileges on the affected device, potentially leading to full device compromise. This can disrupt network operations, enable persistent access, or facilitate further attacks within the network.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the router's web management interface to trusted networks and users only.

Weaknesses

CWE-78OS Command Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:10:09 UTC

Weaknesses

References

Related threats