Description
An improper authentication vulnerability affecting Vonets
industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior enables an unauthenticated remote attacker to
bypass authentication via a specially crafted direct request when
another user has an active session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vonets | VAR1200-H | ≤ 3.3.23.6.9 | — |
| Vonets | VAR1200-L | ≤ 3.3.23.6.9 | — |
| Vonets | VAR600-H | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11AC | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G-500S | ≤ 3.3.23.6.9 | — |
| Vonets | VBG1200 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11S-5G | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11S | ≤ 3.3.23.6.9 | — |
| Vonets | VAR11N-300 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G-300 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11N-300 | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G | ≤ 3.3.23.6.9 | — |
| Vonets | VAP11G-500 | ≤ 3.3.23.6.9 | — |
| Vonets | VGA-1000 | ≤ 3.3.23.6.9 | — |
Advisories 1
- ICSA-24-214-08 Vonets WiFi Bridges CISA ICS & IT advisories · Aug 1, 2024