Skip to content
OpenAdvisories
High · 7.5 CVE-2024-11981 EUVD-2024-34038GHSA-2r3m-26p3-wr26

Billion Electric router - Authentication Bypass

Published Nov 29, 2024 · Updated Nov 29, 2024 · Assigned by twcert

Vendor: Billion Electric Product: M100 Product: M120N Product: M150 Product: M500

Description

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.

Affected products

VendorProductAffectedFixed
Billion Electric M100 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8
Billion Electric M150 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8
Billion Electric M120N 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8
Billion Electric M500 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8

References