CVE-2024-11980 Billion Electric router - Missing Authentication

🗓️ 29 Nov 2024 06:03:04Reported by twcertType

Billion Electric router Missing Authentication vulnerabilit

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the microprogramming software of industrial routers such as Billion M100, Billion M150, Billion M120N, and Billion M500 lies in the ability to bypass authentication procedures by using an alternative path or channel. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.	3 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of industrial routers Billion M100, Billion M150, Billion M120N, and Billion M500 lies in the absence of authentication for a critical function. This allows attackers to circumvent security restrictions, gain unauthorized access to protected information, or cause service failures.	3 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of industrial routers Billion M100, Billion M150, Billion M120N, and Billion M500, related to the storage of passwords in an open manner, allows a intruder to gain unauthorized access to protected information.	3 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-11980	29 Nov 202406:15	–	circl
CNNVD	Billion Electric多款产品安全漏洞	29 Nov 202400:00	–	cnnvd
CVE	CVE-2024-11980	29 Nov 202406:03	–	cve
EUVD	EUVD-2024-34037	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11980	29 Nov 202406:15	–	nvd
Positive Technologies	PT-2024-8937 · Billion Electric · Billion Electric Routers	29 Nov 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-11980 Billion Electric router - Missing Authentication	29 Nov 202406:03	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "M100",
    "vendor": "Billion Electric",
    "versions": [
      {
        "lessThan": "1.04.1.592.8",
        "status": "affected",
        "version": "1.04.1.592.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.613.13",
        "status": "affected",
        "version": "1.04.1.613.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.1.675",
        "status": "affected",
        "version": "1.04.1.*",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M150",
    "vendor": "Billion Electric",
    "versions": [
      {
        "lessThan": "1.04.1.592.8",
        "status": "affected",
        "version": "1.04.1.592.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.613.13",
        "status": "affected",
        "version": "1.04.1.613.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.1.675",
        "status": "affected",
        "version": "1.04.1.*",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M120N",
    "vendor": "Billion Electric",
    "versions": [
      {
        "lessThan": "1.04.1.592.8",
        "status": "affected",
        "version": "1.04.1.592.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.613.13",
        "status": "affected",
        "version": "1.04.1.613.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.1.675",
        "status": "affected",
        "version": "1.04.1.*",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M500",
    "vendor": "Billion Electric",
    "versions": [
      {
        "lessThan": "1.04.1.592.8",
        "status": "affected",
        "version": "1.04.1.592.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.613.13",
        "status": "affected",
        "version": "1.04.1.613.*",
        "versionType": "custom"
      },
      {
        "lessThan": "1.04.1.675",
        "status": "affected",
        "version": "1.04.1.*",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
twcert	www.twcert.org.tw/tw/cp-132-8273-95a07-1.html
twcert	www.twcert.org.tw/en/cp-139-8274-01e55-2.html

29 Nov 2024 08:39Current

CVSS 3.18.6

EPSS0.00454

CWE-306