HIGH🇬🇧 English

CVE-2024-33700

CVSS 7.5v3.1pub. 2024-10-30upd. 2024-11-21

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Level1 Wbr 6012

    HW
    Level1
    wszystkie wersje

  • Level1 Wbr 6012 Firmware

    OS
    Level1
    r0.40e6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2024-33699CRITICAL9.9PL ✓ten sam produkt

LevelOne WBR-6012: zmiana hasła admina bez uwierzytelnienia

CVE-2024-23309CRITICAL9.0PL ✓ten sam produkt

Pominięcie uwierzytelnienia w routerze LevelOne WBR-6012 przez spoofing IP

CVE-2024-24777HIGH8.8ten sam produkt

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne ...

CVE-2024-31151HIGH8.1ten sam produkt

A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain ...

CVE-2024-28875HIGH8.1ten sam produkt

A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain ...