HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-33377

CVSS 8.1v3.1pub. 2024-06-14upd. 2025-05-30

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

  • Lb Link Bl W1210m

    HW
    Lb-Link
    2.0

  • Lb Link Bl W1210m Firmware

    OS
    Lb-Link
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-33375CRITICAL9.8PL ✓same product

LB-LINK BL-W1210M — przechowywanie danych uwierzytelniających w postaci jawnej

CVE-2024-33373MEDIUM6.3same product

An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and ...

CVE-2025-29063CRITICAL9.8PL ✓same vendor

RCE w LB-Link BL-AC2100 — nieprawidłowa obsługa parametru enable

CVE-2025-29062CRITICAL9.8PL ✓same vendor

RCE w LB-Link BL-AC2100 przez parametry set_LimitClient_cfg

CVE-2024-51431CRITICAL9.8PL ✓same vendor

Zakodowane na stałe dane uwierzytelniające w routerze LB-LINK BL-WR1300H