Skip to content
OpenAdvisories
Critical ICSA-24-214-08 7 CVEs

Vonets WiFi Bridges

Published Aug 1, 2024 · Updated Aug 1, 2024

Vendor: Vonets Product: VAP11AC Product: VAP11G Product: VAP11G-300 Product: VAP11G-500 Product: VAP11G-500S Product: VAP11N-300 Product: VAP11S Product: VAP11S-5G Product: VAR11N-300 Product: VAR1200-H Product: VAR1200-L Product: VAR600-H Product: VBG1200 Product: VGA-1000

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial-of-service condition, or execute arbitrary code on the affected device.

Vulnerabilities 7

  • Critical 10.0
    CVE-2024-39791

    Vonets WiFi Bridges Stack-based Buffer Overflow

    Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code.

    Vonets VAP11AC VAP11G-500 VBG1200
  • Critical 9.1
    CVE-2024-37023

    Vonets WiFi Bridges Command Injection

    Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint param…

    Vonets VGA-1000 VAP11S-5G VAR11N-300
  • Critical 9.1
    CVE-2024-39815

    Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions

    Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A spec…

    Vonets VAR600-H VAP11G VAP11G-500S
  • High 8.6
    CVE-2024-29082

    Vonets WiFi Bridges Improper Access Control

    Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprot…

    Vonets VAR1200-L VAP11N-300 VAP11AC
  • High 8.6
    CVE-2024-42001

    Vonets WiFi Bridges Forced Browsing

    An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a specially crafted direct reques…

    Vonets VAP11S VAR1200-H VAP11G-300
  • High 7.5
    CVE-2024-41161

    Vonets WiFi Bridges Use of Hard-coded Credentials

    Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator cr…

    Vonets VAR11N-300 VAR1200-L VAP11N-300
  • High 7.5
    CVE-2024-41936

    Vonets WiFi Bridges Path Traversal

    A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication.

    Vonets VAR1200-H VAP11G-300 VAR600-H

Revision history

  1. #1

    Initial Publication

References