CVE Feed

    Dashboard / CVE / CVE-2024-46327

    CVE-2024-46327

    An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.

    Published:Sep 26, 2024
    Last Modified:Jun 24, 2025
    EPS:Sep 26, 2024
    EPSS Score:0.00094
    CVSS Score:5.7

    Affected Products

    Vendor
    Vonets
    Product
    Vap11g-300
    Vendor
    Vonets
    Product
    Vap11g-300 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-46330 (CVSS 7.4) — VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebs…
    CVE-2024-46329 (CVSS 8) — VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemComman…
    CVE-2024-46328 (CVSS 8) — VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged…
    CVE-2024-42001 (CVSS 6.1) — An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi brid…
    CVE-2024-39791 (CVSS 10) — Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bri…
    CVE-2024-39815 (CVSS 9.4) — Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi brid…
    CVE-2024-37023 (CVSS 9.4) — Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridg…
    CVE-2024-41936 (CVSS 8.7) — A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, …
    CVE-2024-29082 (CVSS 8.8) — Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeate…
    CVE-2024-41161 (CVSS 8.7) — Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge rep…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High