High severity · published Oct 30, 2024
CVE-2024-23309
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication
8.1
CVSS
0.9%
EPSS
No
On KEV
Description
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WB
WBR-6012 · LevelOne
R0.40e6 · source: vendor, CISA
WF
Wbr-6012 Firmware · Level1
r0.40e6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-23309
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-23309
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1996
www.talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1996
More from WBR-6012
9.8
CVE-2024-31151
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot
8.8
CVE-2024-24777
A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6
8.8
CVE-2024-33699
The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher…
8.1
CVE-2024-28875
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot
7.5
CVE-2024-31152
The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a…