CVE-2023-46685

Summary

A hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623. A set of specially crafted network packets can lead to arbitrary command execution.

Affected Software

VendorProductVersion RangeStatus
LevelOneWBR-6013RER4_A_v3411b_2T2R_LEV_09_170623affected

Weaknesses

  • CWE-259: CWE-259: Use of Hard-coded Password

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: yes
    • Technical Impact: total

CVE Program Container

Additional References

References