CVE-2024-41936highCWE-22

CVE-2024-41936: high-severity vulnerability in Vonets VAP11AC

Vonets WiFi Bridges Path Traversal

Published · Updated

Follow this CVE+ Monitor VAP11AC+ Monitor VAP11G

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 1.7%
A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Vonets · VAP11ACVonets · VAP11GVonets · VAP11G-300Vonets · VAP11G-500Vonets · VAP11G-500SVonets · VAP11N-300Vonets · VAP11SVonets · VAP11S-5GVonets · VAR11N-300Vonets · VAR1200-HVonets · VAR1200-LVonets · VAR600-HVonets · VBG1200Vonets · VGA-1000
Related CVEs — Vonets VAP11AC

In the same product, most dangerous first.

CVE-2024-37023CRITICALVonets WiFi Bridges Command InjectionEPSS 1.3%CVE-2024-39791CRITICALVonets WiFi Bridges Stack-based Buffer OverflowEPSS 1.1%CVE-2024-29082HIGHVonets WiFi Bridges Improper Access ControlEPSS 0.8%CVE-2024-39815CRITICALVonets WiFi Bridges Improper Check or Handling of Exceptional ConditionsEPSS 0.8%CVE-2024-42001MEDIUMVonets WiFi Bridges Forced BrowsingEPSS 0.7%CVE-2024-41161HIGHVonets WiFi Bridges Use of Hard-coded CredentialsEPSS 0.6%