CVE-2024-39815criticalCWE-703

CVE-2024-39815: falha crítica em Vonets VAP11AC

Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar VAP11AC+ Monitorar VAP11G

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.8%
Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A specially-crafted HTTP request to pre-authentication resources can crash the service.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Vonets · VAP11ACVonets · VAP11GVonets · VAP11G-300Vonets · VAP11G-500Vonets · VAP11G-500SVonets · VAP11N-300Vonets · VAP11SVonets · VAP11S-5GVonets · VAR11N-300Vonets · VAR1200-HVonets · VAR1200-LVonets · VAR600-HVonets · VBG1200Vonets · VGA-1000
CVEs relacionadas — Vonets VAP11AC

No mesmo produto, das mais perigosas para as menos.

CVE-2024-41936HIGHVonets WiFi Bridges Path TraversalEPSS 1.7%CVE-2024-37023CRITICALVonets WiFi Bridges Command InjectionEPSS 1.3%CVE-2024-39791CRITICALVonets WiFi Bridges Stack-based Buffer OverflowEPSS 1.1%CVE-2024-29082HIGHVonets WiFi Bridges Improper Access ControlEPSS 0.8%CVE-2024-42001MEDIUMVonets WiFi Bridges Forced BrowsingEPSS 0.7%CVE-2024-41161HIGHVonets WiFi Bridges Use of Hard-coded CredentialsEPSS 0.6%