CVE Feed

    Dashboard / CVE / CVE-2024-41936

    CVE-2024-41936

    A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication.

    Published:Aug 8, 2024
    Last Modified:Aug 21, 2024
    EPS:Aug 8, 2024
    EPSS Score:0.00354
    CVSS Score:7.5

    Affected Products

    Vendor
    Vonets
    Product
    Vap11ac
    Vendor
    Vonets
    Product
    Vap11ac Firmware
    Vendor
    Vonets
    Product
    Vap11g
    Vendor
    Vonets
    Product
    Vap11g-300
    Vendor
    Vonets
    Product
    Vap11g-300 Firmware
    Vendor
    Vonets
    Product
    Vap11g-500
    Vendor
    Vonets
    Product
    Vap11g-500 Firmware
    Vendor
    Vonets
    Product
    Vap11g-500s
    Vendor
    Vonets
    Product
    Vap11g-500s Firmware
    Vendor
    Vonets
    Product
    Vap11g Firmware
    Vendor
    Vonets
    Product
    Vap11n-300
    Vendor
    Vonets
    Product
    Vap11n-300 Firmware
    Vendor
    Vonets
    Product
    Vap11s
    Vendor
    Vonets
    Product
    Vap11s-5g
    Vendor
    Vonets
    Product
    Vap11s-5g Firmware
    Vendor
    Vonets
    Product
    Vap11s Firmware
    Vendor
    Vonets
    Product
    Var11n-300
    Vendor
    Vonets
    Product
    Var11n-300 Firmware
    Vendor
    Vonets
    Product
    Var1200-h
    Vendor
    Vonets
    Product
    Var1200-h Firmware
    Vendor
    Vonets
    Product
    Var1200-l
    Vendor
    Vonets
    Product
    Var1200-l Firmware
    Vendor
    Vonets
    Product
    Var600-h
    Vendor
    Vonets
    Product
    Var600-h Firmware
    Vendor
    Vonets
    Product
    Vbg1200
    Vendor
    Vonets
    Product
    Vbg1200 Firmware
    Vendor
    Vonets
    Product
    Vga-1000
    Vendor
    Vonets
    Product
    Vga-1000 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-42001 (CVSS 6.1) — An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi brid…
    CVE-2024-39791 (CVSS 10) — Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bri…
    CVE-2024-39815 (CVSS 9.4) — Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi brid…
    CVE-2024-37023 (CVSS 9.4) — Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridg…
    CVE-2024-29082 (CVSS 8.8) — Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeate…
    CVE-2024-41161 (CVSS 8.7) — Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge rep…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High