Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-29082

Vonets WiFi Bridges Improper Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Vonets VAR1200-H

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAR1200-L

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAR600-H

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11AC

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G-500S

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VBG1200

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11S-5G

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11S

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAR11N-300

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G-300

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11N-300

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G-500

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VBG1200

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11AC

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VGA-1000

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

References