// For flags

CVE-2024-42001

Vonets WiFi Bridges Forced Browsing

Severity Score

6.1
*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

An improper authentication vulnerability affecting Vonets







industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior enables an unauthenticated remote attacker to
bypass authentication via a specially crafted direct request when
another user has an active session.

*Credits: Wodzen reported these vulnerabilities to CISA.
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
Present
Privileges Required
None
User Interaction
Passive
System
Vulnerable | Subsequent
Confidentiality
High
None
Integrity
Low
None
Availability
Low
None
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-07-30 CVE Reserved
  • 2024-08-08 CVE Published
  • 2024-08-21 CVE Updated
  • 2024-08-21 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-425: Direct Request ('Forced Browsing')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Vonets
Search vendor "Vonets"
 VAR1200-H
Search vendor "Vonets" for product "VAR1200-H"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAR1200-H" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAR1200-L
Search vendor "Vonets" for product "VAR1200-L"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAR1200-L" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAR600-H
Search vendor "Vonets" for product "VAR600-H"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAR600-H" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11AC
Search vendor "Vonets" for product "VAP11AC"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11AC" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11G-500S
Search vendor "Vonets" for product "VAP11G-500S"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11G-500S" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VBG1200
Search vendor "Vonets" for product "VBG1200"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VBG1200" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11S-5G
Search vendor "Vonets" for product "VAP11S-5G"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11S-5G" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11S
Search vendor "Vonets" for product "VAP11S"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11S" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAR11N-300
Search vendor "Vonets" for product "VAR11N-300"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAR11N-300" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11G-300
Search vendor "Vonets" for product "VAP11G-300"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11G-300" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11N-300
Search vendor "Vonets" for product "VAP11N-300"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11N-300" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11G
Search vendor "Vonets" for product "VAP11G"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11G" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11G-500
Search vendor "Vonets" for product "VAP11G-500"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11G-500" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VBG1200
Search vendor "Vonets" for product "VBG1200"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VBG1200" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VAP11AC
Search vendor "Vonets" for product "VAP11AC"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VAP11AC" and version " <= 3.3.23.6.9"
en
Affected
Vonets
Search vendor "Vonets"
 VGA-1000
Search vendor "Vonets" for product "VGA-1000"
 <= 3.3.23.6.9
Search vendor "Vonets" for product "VGA-1000" and version " <= 3.3.23.6.9"
en
Affected