HIGH🇬🇧 English

CVE-2024-24777

CVSS 8.8v3.1pub. 2024-10-30upd. 2024-11-21

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Level1 Wbr 6012

    HW
    Level1
    wszystkie wersje

  • Level1 Wbr 6012 Firmware

    OS
    Level1
    r0.40e6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-33699CRITICAL9.9PL ✓ten sam produkt

LevelOne WBR-6012: zmiana hasła admina bez uwierzytelnienia

CVE-2024-23309CRITICAL9.0PL ✓ten sam produkt

Pominięcie uwierzytelnienia w routerze LevelOne WBR-6012 przez spoofing IP

CVE-2024-28875HIGH8.1ten sam produkt

A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain ...

CVE-2024-31151HIGH8.1ten sam produkt

A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain ...

CVE-2024-33700HIGH7.5ten sam produkt

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP fu...