VULNERABILITY INTELLIGENCE
CVE-2025-3758
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-05-08
Last modified2026-06-17
Description
WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness classification
- cvd@cert.pl: CWE-256