CVE-2024-29082

Vonets WiFi Bridges Improper Access Control

CVSS 8.8 HIGHEPSS 0.8%CWE-284

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Productos afectados

Vonets · VAP11AC Vonets · VAP11G Vonets · VAP11G-300 Vonets · VAP11G-500 Vonets · VAP11G-500S Vonets · VAP11N-300 Vonets · VAP11S Vonets · VAP11S-5G Vonets · VAR11N-300 Vonets · VAR1200-H Vonets · VAR1200-L Vonets · VAR600-H Vonets · VBG1200 Vonets · VGA-1000

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08