Description
An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a specially crafted direct request when another user has an active session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Vonets VAR1200-H
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAR1200-L
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAR600-H
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11AC
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G-500S
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VBG1200
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11S-5G
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11S
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAR11N-300
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G-300
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11N-300
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11G-500
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VBG1200
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VAP11AC
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected
Vonets VGA-1000
Default version status: unaffected
0 to ≤ 3.3.23.6.9affected