Description
Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior, enables an unauthenticated remote attacker to
bypass authentication using hard-coded administrator credentials. These
accounts cannot be disabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vonets | VAR1200-H | ≤ 3.3.23.6.9 | — |
| Vonets | VAR1200-L | ≤ 3.3.23.6.9 | — |
| Vonets | VAR600-H | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11AC | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G-500S | ≤ 3.3.23.6.9 | — |
| Vonets | VBG1200 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11S-5G | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11S | ≤ 3.3.23.6.9 | — |
| Vonets | VAR11N-300 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G-300 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11N-300 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G-500 | ≤ 3.3.23.6.9 | — |
| Vonets | VGA-1000 | ≤ 3.3.23.6.9 | — |
Advisories 1
- ICSA-24-214-08 Vonets WiFi Bridges CISA ICS & IT advisories · Aug 1, 2024