PT-2024-8937 · Billion Electric · Billion Electric Routers

🗓️ 29 Nov 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Billion Electric routers store passwords in plaintext; admins can view them in user settings.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the microprogramming software of industrial routers such as Billion M100, Billion M150, Billion M120N, and Billion M500 lies in the ability to bypass authentication procedures by using an alternative path or channel. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.	3 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of industrial routers Billion M100, Billion M150, Billion M120N, and Billion M500 lies in the absence of authentication for a critical function. This allows attackers to circumvent security restrictions, gain unauthorized access to protected information, or cause service failures.	3 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of industrial routers Billion M100, Billion M150, Billion M120N, and Billion M500, related to the storage of passwords in an open manner, allows a intruder to gain unauthorized access to protected information.	3 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-11980	29 Nov 202406:15	–	circl
Circl	CVE-2024-11982	29 Nov 202407:39	–	circl
CNNVD	Billion Electric多款产品安全漏洞	29 Nov 202400:00	–	cnnvd
CNNVD	Billion Electric多款产品安全漏洞	29 Nov 202400:00	–	cnnvd
CVE	CVE-2024-11980	29 Nov 202406:03	–	cve
CVE	CVE-2024-11982	29 Nov 202406:45	–	cve
Cvelist	CVE-2024-11980 Billion Electric router - Missing Authentication	29 Nov 202406:03	–	cvelist

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-11982
bdu	www.bdu.fstec.ru/vul/2024-10612
uk	www.uk.billion.com/M2M/Industrial%20IoT
twitter	www.twitter.com/cracbot/status/1864187981990690989
twitter	www.twitter.com/fletch_ai/status/1864203091454906451
t	www.t.me/latest_high_impact_cve/1596
twitter	www.twitter.com/VulmonFeeds/status/1862657483115790418
twcert	www.twcert.org.tw/en/cp-139-8278-cb581-2.html
twitter	www.twitter.com/CVEnew/status/1862394781197844647
securityonline	www.securityonline.info/cve-2024-11980-cvss-10-critical-flaw-in-billion-electric-routers

04 Dec 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 29

CVSS 3.18.6

EPSS0.00608

SSVC

plaintext passwords admin privileges user settings billion electric routers