CVE-2024-23309criticalCWE-291

CVE-2024-23309: falha crítica em LevelOne WBR-6012

Publicada em

Seguir esta CVE+ Monitorar WBR-6012

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9epss 0.9%
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
LevelOne · WBR-6012
CVEs relacionadas — LevelOne WBR-6012

No mesmo produto, das mais perigosas para as menos.

CVE-2024-31152MEDIUMCVE-2024-31152EPSS 17.8%CVE-2024-33623LOWCVE-2024-33623EPSS 11.9%CVE-2024-33699CRITICALCVE-2024-33699EPSS 11.2%CVE-2024-24777HIGHCVE-2024-24777EPSS 8.7%CVE-2024-33603MEDIUMCVE-2024-33603EPSS 8.6%CVE-2024-33700HIGHCVE-2024-33700EPSS 0.8%