CVE-2024-11980

CVE-2024-11980 describes a Missing Authentication vulnerability in multiple Billion Electric WiFi routers. Attackers can remotely and unauthenticatedly access a specific router function to obtain partial device information, modify the WiFi SSID, and restart the device. The CVSS 3.1 vector (AV:N/A...

CVE-2024-11980: Missing Authentication for Critical Function

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device...