CVE Feed

    Dashboard / CVE / CVE-2024-37023

    CVE-2024-37023

    Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parameters.

    Published:Aug 8, 2024
    Last Modified:Aug 21, 2024
    EPS:Aug 8, 2024
    EPSS Score:0.00418
    CVSS Score:9.1

    Affected Products

    Vendor
    Vonets
    Product
    Vap11ac
    Vendor
    Vonets
    Product
    Vap11ac Firmware
    Vendor
    Vonets
    Product
    Vap11g
    Vendor
    Vonets
    Product
    Vap11g-300
    Vendor
    Vonets
    Product
    Vap11g-300 Firmware
    Vendor
    Vonets
    Product
    Vap11g-500
    Vendor
    Vonets
    Product
    Vap11g-500 Firmware
    Vendor
    Vonets
    Product
    Vap11g-500s
    Vendor
    Vonets
    Product
    Vap11g-500s Firmware
    Vendor
    Vonets
    Product
    Vap11g Firmware
    Vendor
    Vonets
    Product
    Vap11n-300
    Vendor
    Vonets
    Product
    Vap11n-300 Firmware
    Vendor
    Vonets
    Product
    Vap11s
    Vendor
    Vonets
    Product
    Vap11s-5g
    Vendor
    Vonets
    Product
    Vap11s-5g Firmware
    Vendor
    Vonets
    Product
    Vap11s Firmware
    Vendor
    Vonets
    Product
    Var11n-300
    Vendor
    Vonets
    Product
    Var11n-300 Firmware
    Vendor
    Vonets
    Product
    Var1200-h
    Vendor
    Vonets
    Product
    Var1200-h Firmware
    Vendor
    Vonets
    Product
    Var1200-l
    Vendor
    Vonets
    Product
    Var1200-l Firmware
    Vendor
    Vonets
    Product
    Var600-h
    Vendor
    Vonets
    Product
    Var600-h Firmware
    Vendor
    Vonets
    Product
    Vbg1200
    Vendor
    Vonets
    Product
    Vbg1200 Firmware
    Vendor
    Vonets
    Product
    Vga-1000
    Vendor
    Vonets
    Product
    Vga-1000 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-42001 (CVSS 6.1) — An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi brid…
    CVE-2024-39791 (CVSS 10) — Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bri…
    CVE-2024-39815 (CVSS 9.4) — Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi brid…
    CVE-2024-41936 (CVSS 8.7) — A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, …
    CVE-2024-29082 (CVSS 8.8) — Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeate…
    CVE-2024-41161 (CVSS 8.7) — Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge rep…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High