CVE-2024-41161: falha de alta gravidade em Vonets VAP11AC
Vonets WiFi Bridges Use of Hard-coded Credentials
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.6%
Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior, enables an unauthenticated remote attacker to
bypass authentication using hard-coded administrator credentials. These
accounts cannot be disabled.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Vonets · VAP11ACVonets · VAP11GVonets · VAP11G-300Vonets · VAP11G-500Vonets · VAP11G-500SVonets · VAP11N-300Vonets · VAP11SVonets · VAP11S-5GVonets · VAR11N-300Vonets · VAR1200-HVonets · VAR1200-LVonets · VAR600-HVonets · VBG1200Vonets · VGA-1000CVEs relacionadas — Vonets VAP11AC
No mesmo produto, das mais perigosas para as menos.
CVE-2024-41936HIGHVonets WiFi Bridges Path TraversalEPSS 1.7%CVE-2024-37023CRITICALVonets WiFi Bridges Command InjectionEPSS 1.3%CVE-2024-39791CRITICALVonets WiFi Bridges Stack-based Buffer OverflowEPSS 1.1%CVE-2024-29082HIGHVonets WiFi Bridges Improper Access ControlEPSS 0.8%CVE-2024-39815CRITICALVonets WiFi Bridges Improper Check or Handling of Exceptional ConditionsEPSS 0.8%CVE-2024-42001MEDIUMVonets WiFi Bridges Forced BrowsingEPSS 0.7%