Overview
- Description
- The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.
- Source
- talos-cna@cisco.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 8.1
- Impact score
- 5.9
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- talos-cna@cisco.com
- CWE-291
Social media
- Hype score
- Not currently trending
CVE-2024-23309 The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authen… https://t.co/7aWX5DgKcG
@CVEnew
30 Oct 2024
343 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2024-23309: CRITICAL] Vulnerability in LevelOne WBR-6012 router firmware R0.40e6 allows authentication bypass via IP address spoofing, enabling unauthorized access without session token. #CyberSecurity#cybersecurity,#vulnerability https://t.co/6qfmgnNdUJ https://t.co/rhK5Dfl
@CveFindCom
30 Oct 2024
32 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:level1:wbr-6012_firmware:r0.40e6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCC94B2E-4651-4E98-90A1-CB53CC2E24CC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:level1:wbr-6012:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1FD255E3-0DBF-440C-AC6A-90B30DB59B34"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]