CVE-2024-33699

Summary

The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password.

Affected Software

VendorProductVersion RangeStatus
LevelOneWBR-6012R0.40e6affected

Weaknesses

  • CWE-620: CWE-620: Unverified Password Change

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References