Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-41161

Vonets WiFi Bridges Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be disabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Vonets VAR1200-H

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAR1200-L

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAR600-H

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11AC

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G-500S

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VBG1200

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11S-5G

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11S

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAR11N-300

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G-300

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11N-300

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11G-500

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VBG1200

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VAP11AC

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

Vonets VGA-1000

Default version status: unaffected

  • 0 to ≤ 3.3.23.6.9affected

References