CVE-2024-33626: Exposure of Sensitive Information to an Unauthorized Actor

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the...

CVE-2024-31152: Uncontrolled Resource Consumption

The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions...

PT-2024-25385 · Levelone · Levelone Wbr-6012

Name of the Vulnerable Software and Affected Versions: LevelOne WBR-6012 router affected versions not specified Description: The issue concerns a vulnerability within the web application of the router, allowing unauthenticated disclosure of sensitive information. This includes the WiFi WPS PIN,...

LevelOne WBR-6012 hard-coded password vulnerability

Talos Vulnerability Report TALOS-2024-1979 LevelOne WBR-6012 hard-coded password vulnerability October 30, 2024 CVE Number CVE-2024-28875,CVE-2024-31151 SUMMARY A security flaw involving hard-coded credentials in LevelOne WBR-6012’s web services allows attackers to gain unauthorized access during...

LevelOne WBR-6012 Web Application improper resource allocation vulnerability

Talos Vulnerability Report TALOS-2024-1982 LevelOne WBR-6012 Web Application improper resource allocation vulnerability October 30, 2024 CVE Number CVE-2024-31152 SUMMARY The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application,...

LevelOne WBR-6012 Web Application information disclosure vulnerability

Talos Vulnerability Report TALOS-2024-1986 LevelOne WBR-6012 Web Application information disclosure vulnerability October 30, 2024 CVE Number CVE-2024-33626 SUMMARY The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive...

LevelOne WBR-6012 Web Application cross-site request forgery (CSRF) vulnerability

Talos Vulnerability Report TALOS-2024-1981 LevelOne WBR-6012 Web Application cross-site request forgery CSRF vulnerability October 30, 2024 CVE Number CVE-2024-24777 SUMMARY A cross-site request forgery CSRF vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e...

LevelOne WBR-6012 Web Application weak authentication vulnerability

Talos Vulnerability Report TALOS-2024-1984 LevelOne WBR-6012 Web Application weak authentication vulnerability October 30, 2024 CVE Number CVE-2024-33699 SUMMARY The LevelOne WBR-6012 router’s web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the...

PT-2024-25382 · Levelone · Levelone Wbr-6012

Name of the Vulnerable Software and Affected Versions: LevelOne WBR-6012 version R0.40e6 Description: A denial of service issue exists in the Web Application functionality. It can be triggered by a specially crafted HTTP request, leading to a reboot. An attacker can exploit this by sending a...

CVE-2024-24777: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability...

LevelOne WBR-6012 Web Application denial of service vulnerability

Talos Vulnerability Report TALOS-2024-2001 LevelOne WBR-6012 Web Application denial of service vulnerability October 30, 2024 CVE Number CVE-2024-33623 SUMMARY A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP...

LevelOne WBR-6012 security vulnerability

The LevelOne WBR-6012 is a wireless router from LevelOne. A security vulnerability exists in the LevelOne WBR-6012 that stems from the inclusion of a sensitive information disclosure issue...

LevelOne WBR-6012: Input validation error vulnerability

The LevelOne WBR-6012 is a wireless router from LevelOne. The LevelOne WBR-6012 suffers from an Input Authentication Error vulnerability that originates from a series of incorrectly formatted FTP commands that can lead to a denial of service...

LevelOne WBR-6012 information leakage vulnerability

The LevelOne WBR-6012 is a wireless router from LevelOne. An information disclosure vulnerability exists in the LevelOne WBR-6012, which originates from a hidden page accessed via an HTTP request that can disclose sensitive information without authentication...

LevelOne WBR-6012 Trust Management Vulnerability

The LevelOne WBR-6012 is a wireless router from LevelOne. A trust management issue vulnerability exists in the LevelOne WBR-6012, which stems from an issue with the use of hard-coded credentials in web services...

LevelOne WBR-6012 Cross-Site Request Forgery Vulnerability

The LevelOne WBR-6012 is a wireless router from LevelOne. The LevelOne WBR-6012 suffers from a cross-site request forgery vulnerability that stems from a cross-site request forgery CSRF vulnerability in a web application function...

PT-2024-23797

Name of the Vulnerable Software and Affected Versions LevelOne WBR-6012 router version R0.40e6 Description The issue is related to improper resource allocation within the web application of the router. It can be triggered by a series of crafted HTTP requests, leading to a reboot of the device. Th...

CVE-2024-33623: Loop with Unreachable Exit Condition

A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

PT-2024-20555 · Levelone · Levelone Wbr-6012

Name of the Vulnerable Software and Affected Versions: LevelOne WBR-6012 version R0.40e6 Description: A cross-site request forgery CSRF issue exists in the Web Application functionality. This allows an attacker to stage a malicious web page that can trigger the vulnerability, leading to...

PT-2024-19800 · Levelone · Levelone Wbr-6012

Name of the Vulnerable Software and Affected Versions: LevelOne WBR-6012 version R0.40e6 Description: The issue is related to an authentication bypass in the web application of the router, which relies on client IP addresses for authentication. This allows attackers to spoof an IP address and gai...