Key Information Vulnerability Description Vulnerability Type: Null Pointer Dereference Vulnerability Affected Device: Netis WF2880 Firmware Version: v2.1.40207 Vulnerable Location: FUN_004904c8 function in cgitest.cgi file Vulnerability Details Trigger Condition: Setting the environment variable to a negative value can trigger a null pointer dereference. Impact: May lead to program crash and Denial of Service (DoS) attack. Analysis Process Analysis using Ghidra revealed a null pointer dereference issue at line 18 in the FUN_004904c8 function. Critical code snippet: Proof of Concept (PoC) Command: Result: Successfully triggered the null pointer dereference vulnerability, resulting in a segmentation fault and core dump.