Administrator Password Change Vulnerability in LevelOne WBR-6012 Router
CVE-2024-33699

8.8HIGH

Key Information:

Vendor

Levelone

Status
Wbr-6012
Vendor
CVE Published:
30 October 2024

What is CVE-2024-33699?

The LevelOne WBR-6012 Router's web application contains a security vulnerability that permits attackers to manipulate the administrator password without requiring the current password. This flaw, present in firmware version R0.40e6, can lead to unauthorized access and elevated privileges. Attackers exploiting this vulnerability might compromise the integrity and security of the network, highlighting the necessity of timely updates and stringent security measures.

Affected Version(s)

WBR-6012 R0.40e6

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Patrick DeSantis and Francesco Benvenuto of Cisco Talos.
.