AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2019-8985

CRITICAL · CVSS 9.8 EPSS 13.30% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-02-21 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-8985
Severity
CRITICAL
CVSS
9.8
EPSS
13.30%

Original Filing — NVD Description

On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overflow that does not require authentication. This can cause denial of service (device restart) or remote code execution. This vulnerability can be triggered by a GET request with a long HTTP "Authorization: Basic" header that is mishandled by user_auth->user_ok in /bin/boa.