The vulnerability in the /cgi-bin/debug CGI endpoint of the Netis EAP930 allows an attacker to manipulate the SIGNATURE parameter and gain a remote backdoor into the device. The impact is the ability to execute unauthorized commands or access protected resources without legitimate credentials. The description notes a high degree of complexity and that exploitability is assessed as difficult, yet the existence of a backdoor pathway presents a serious threat to confidentiality and integrity.

Devices running Netis EAP930 version 1.250905.115454 are affected. The flaw resides in the CGI component that returns a 200 OK status on the debug endpoint, and manipulation of the SIGNATURE argument enables the backdoor. Any installation that exposes this endpoint to external networks may be vulnerable.

With a CVSS score of 8.9 the vulnerability is considered high severity. EPSS information is not available, and the issue is not listed in the CISA KEV catalog, suggesting no confirmed exploitation in the wild at present. The attack requires remote access to the web interface and the ability to send crafted requests to /cgi-bin/debug, but the high complexity of manipulating the SIGNATURE parameter means that while the risk remains significant, the probability of successful exploitation is lower than for less complex vulnerabilities.