Lucene search
IcscertVULNRICHMENT:CVE-2024-41161HistoryAug 08, 2024 - 5:49 p.m.
CVE-2024-41161 Vonets WiFi Bridges Use of Hard-coded Credentials
2024-08-0817:49:35
CWE-798
icscert
github.com
3
vonets
wifi bridges
hard-coded credentials
vulnerability
remote attacker
authentication
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS4
8.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N
AI Score
7.7
Confidence
Low
EPSS
0.001
Percentile
39.6%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
partial
Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior, enables an unauthenticated remote attacker to
bypass authentication using hard-coded administrator credentials. These
accounts cannot be disabled.
CNA Affected
[
{
"vendor": "Vonets",
"product": "VAR1200-H",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAR1200-L",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAR600-H",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11AC",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11G-500S",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VBG1200",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11S-5G",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11S",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAR11N-300",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11G-300",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11N-300",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11G",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11G-500",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VBG1200",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VAP11AC",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Vonets",
"product": "VGA-1000",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unaffected"
}
]ADP Affected
[
{
"cpes": [
"cpe:2.3:a:vonets:var1200-h_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "var1200-h_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:var1200-l_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "var1200-l_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:var600-h_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "var600-h_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11ac_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11ac_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11g-500s_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11g-500s_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vbg1200_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vbg1200_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11s-5g_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11s-5g_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11s_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11s_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:var11n-300_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "var11n-300_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11n-300_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11n-300_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11g_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11g_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vga-1000_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vga-1000_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11g-300_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11g-300_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vonets:vap11n-300_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "vonets",
"product": "vap11n-300_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.3.23.6.9"
}
],
"defaultStatus": "unknown"
}
]Related
cvelist
cvelist
CVE-2024-41161 Vonets WiFi Bridges Use of Hard-coded Credentials
2024-08-08 17:49:35
cve
cve
CVE-2024-41161
2024-08-08 18:15:10
nvd
nvd
CVE-2024-41161
2024-08-08 18:15:10
ics
ics
Vonets WiFi Bridges
2024-08-01 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS4
8.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N
AI Score
7.7
Confidence
Low
EPSS
0.001
Percentile
39.6%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-41161