Vendor
An unauthenticated firmware update vulnerability in Netis NC63 routers allows attackers to bypass authentication and upload malicious firmware via the /cgi-bin/upload_fw.cgi endpoint.