Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-33626 EUVD-2024-34483GHSA-p2c8-3p7x-5wc8

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive inform…

Published Oct 30, 2024 · Updated Oct 30, 2024 · Assigned by talos

Description

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the device's WiFi network.

Affected products

VendorProductAffectedFixed
LevelOne WBR-6012 R0.40e6 —

References