1. Home
  2. CVE Database
  3. CVE-2024-29082
HIGH · 8.6

CVE-2024-29082

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to...

Vulnerability Description

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
VonetsVar1200-H Firmware<= 3.3.23.6.9
VonetsVar1200-H-
VonetsVar1200-L Firmware<= 3.3.23.6.9
VonetsVar1200-L-
VonetsVar600-H Firmware<= 3.3.23.6.9
VonetsVar600-H-
VonetsVap11Ac Firmware<= 3.3.23.6.9
VonetsVap11Ac-
VonetsVap11G-500S Firmware<= 3.3.23.6.9
VonetsVap11G-500S-
VonetsVbg1200 Firmware<= 3.3.23.6.9
VonetsVbg1200-
VonetsVap11S-5G Firmware<= 3.3.23.6.9
VonetsVap11S-5G-
VonetsVap11S Firmware<= 3.3.23.6.9
VonetsVap11S-
VonetsVar11N-300 Firmware<= 3.3.23.6.9
VonetsVar11N-300-
VonetsVap11G-300 Firmware<= 3.3.23.6.9
VonetsVap11G-300-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2024-29082?

CVE-2024-29082 is a vulnerability with a CVSS score of 8.6 (HIGH). Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to...

How severe is CVE-2024-29082?

CVE-2024-29082 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-29082?

Check the references section above for vendor advisories and patch information. Affected products include: Vonets Var1200-H Firmware, Vonets Var1200-H, Vonets Var1200-L Firmware, Vonets Var1200-L, Vonets Var600-H Firmware.