Medium severity · published Oct 30, 2024
CVE-2024-33603
The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain…
5.3
CVSS
8.6%
EPSS
No
On KEV
Description
The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)8.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WB
WBR-6012 · LevelOne
R0.40e6 · source: vendor, CISA
WF
Wbr-6012 Firmware · Level1
r0.40e6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-33603
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-33603
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1985
www.talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1985
More from WBR-6012
9.8
CVE-2024-31151
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot
8.8
CVE-2024-24777
A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6
8.8
CVE-2024-33699
The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher…
8.1
CVE-2024-28875
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot
8.1
CVE-2024-23309
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication