CVE-2024-41936
12.08.2024, 13:38
A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication.
| Vendor | Product | Version |
|---|---|---|
| vonets | var1200-h_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | var1200-l_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | var600-h_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11ac_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11g-500s_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vbg1200_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11s-5g_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11s_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | var11n-300_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11g-300_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11n-300_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11g_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vap11g-500_firmware | 𝑥 ≤ 3.3.23.6.9 |
| vonets | vga-1000_firmware | 𝑥 ≤ 3.3.23.6.9 |
𝑥
= Vulnerable software versions