Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-33603

The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication.

Published

2024-10-30T14:15:06.330

Last Modified

2024-11-21T09:17:14.493

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System level1 wbr-6012_firmware r0.40e6 Yes
Hardware level1 wbr-6012 - No
References