deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8627
Published: 2024-10-30
Description: The Ultimate TinyMCE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field' shortcode in all versions up to, and including, 5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/ultimate-tinymce/trunk/admin_functions.php#L81; https://www.wordfence.com/threat-intel/vulnerabilities/id/4ddd9cab-f381-4343-a2e6-ef8a1be2ed4e?source=cve
CVE: CVE-2024-8792
Published: 2024-10-30
Description: The Subscribe to Comments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/subscribe-to-comments/trunk/subscribe-to-comments.php#L1470; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3177660%40subscribe-to-comments%2Ftrunk&old=1198281%40subscribe-to-comments%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/a7566ac1-9ae2-44d2-8ad[PII_REDACTED]92?source=cve
CVE: CVE-2024-9846
Published: 2024-10-30
Description: The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/enable-shortcodes-inside-widgetscomments-and-experts/trunk/enable-shortcodes-inside-widgets-comments-experts.php#L19; https://wordpress.org/plugins/enable-shortcodes-inside-widgetscomments-and-experts/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/f1ac2544-f96b-4859-96de-795753a94264?source=cve
CVE: CVE-2024-9884
Published: 2024-10-30
Description: The T(-) Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tminus' shortcode in all versions up to, and including, 2.4.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/t-countdown/trunk/t-countdown.php#L810; https://wordpress.org/plugins/t-countdown/; https://www.wordfence.com/threat-intel/vulnerabilities/id/23a0dcdf-e98f-4e24-9900-49ca522b8038?source=cve
CVE: CVE-2024-9885
Published: 2024-10-30
Description: The Widget or Sidebar Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sidebar' shortcode in all versions up to, and including, 0.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/widget-or-sidebar-per-shortcode/trunk/class-widget-or-sidebar-per-shortcode.php#L89; https://wordpress.org/plugins/widget-or-sidebar-per-shortcode/; https://www.wordfence.com/threat-intel/vulnerabilities/id/20584675-0d4a-4215-8132-e9ea95bee09b?source=cve
CVE: CVE-2024-9886
Published: 2024-10-30
Description: The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidu_map' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-baidu-map/trunk/wp-baidu-map.php; https://wordpress.org/plugins/wp-baidu-map/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ccd917ae-3fa2-47b5-ace7-1462647e2352?source=cve
CVE: CVE-2024-10399
Published: 2024-10-30
Description: The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_search_users function in all versions up to, and including, 5.0.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain usernames and emails of site users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/download-monitor/tags/5.0.13/src/KeyGeneration/class-dlm-key-generation.php#L266; https://plugins.trac.wordpress.org/changeset/3178099/download-monitor/trunk/src/KeyGeneration/class-dlm-key-generation.php?contextall=1; https://www.wordfence.com/threat-intel/vulnerabilities/id/03b88862-012a-4dc6-9abb-99dc0d9408fd?source=cve
CVE: CVE-2024-8871
Published: 2024-10-30
Description: The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.2.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/easy-pricing-tables/trunk/includes/ept-block.php#L304; https://plugins.trac.wordpress.org/browser/easy-pricing-tables/trunk/includes/notices/notices.php#L91; https://www.wordfence.com/threat-intel/vulnerabilities/id/a5e4f40b-c028-4283-ba02-c[PII_REDACTED]3?source=cve
CVE: CVE-2024-10108
Published: 2024-10-30
Description: The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's adverts_add shortcode in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3178088/; https://wordpress.org/plugins/wpadverts/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/8b213c3b-3907-47d9-9826-379936f15078?source=cve
CVE: CVE-2024-10223
Published: 2024-10-30
Description: The WP Team – WordPress Team Member Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's htteamember shortcode in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3177675/; https://wordpress.org/plugins/ht-team-member/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/2f5a8f5b-d67c-4c08-9f2d-1f743ffdae81?source=cve
CVE: CVE-2024-8444
Published: 2024-10-30
Description: The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/bf2f5aa8-a161-43ff-a6ee-8603aaba8012/
CVE: CVE-2024-50503
Published: 2024-10-30
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck User Toolkit user-toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through <= 1.2.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://patchstack.com/database/Wordpress/Plugin/user-toolkit/vulnerability/wordpress-user-toolkit-plugin-1-2-3-account-takeover-vulnerability?_s_id=cve
CVE: CVE-2024-50504
Published: 2024-10-30
Description: Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through <= 1.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266
References: https://patchstack.com/database/Wordpress/Plugin/bulk-role-change/vulnerability/wordpress-bulk-change-role-plugin-1-1-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-50506
Published: 2024-10-30
Description: Incorrect Privilege Assignment vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266
References: https://patchstack.com/database/Wordpress/Plugin/marketing-automation-by-azexo/vulnerability/wordpress-marketing-automation-by-azexo-plugin-1-27-80-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-50507
Published: 2024-10-30
Description: Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This issue affects DS.DownloadList: from n/a through <= 1.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/Wordpress/Plugin/dsdownloadlist/vulnerability/wordpress-ds-downloadlist-plugin-1-3-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-50508
Published: 2024-10-30
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/Wordpress/Plugin/woo-product-design/vulnerability/wordpress-woocommerce-product-design-plugin-1-0-0-arbitrary-file-download-vulnerability?_s_id=cve
CVE: CVE-2024-50509
Published: 2024-10-30
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/Wordpress/Plugin/woo-product-design/vulnerability/wordpress-woocommerce-product-design-plugin-1-0-0-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE: CVE-2024-50510
Published: 2024-10-30
Description: Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For Woocommerce ar-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects AR For Woocommerce: from n/a through <= 6.3.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/Wordpress/Plugin/ar-for-woocommerce/vulnerability/wordpress-ar-for-woocommerce-plugin-6-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-50511
Published: 2024-10-30
Description: Unrestricted Upload of File with Dangerous Type vulnerability in donimedia WP donimedia carousel wp-donimedia-carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through <= 1.0.1.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/Wordpress/Plugin/wp-donimedia-carousel/vulnerability/wordpress-wp-donimedia-carousel-plugin-1-0-1-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-50512
Published: 2024-10-30
Description: Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://patchstack.com/database/Wordpress/Plugin/posti-shipping/vulnerability/wordpress-posti-shipping-plugin-3-10-2-full-path-disclosure-fpd-vulnerability?_s_id=cve
CVE: CVE-2024-9632
Published: 2024-10-30
Description: A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://access.redhat.com/errata/RHSA-2024:10090; https://access.redhat.com/errata/RHSA-2024:8798; https://access.redhat.com/errata/RHSA-2024:9540
CVE: CVE-2024-8512
Published: 2024-10-30
Description: The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization() function. This is due to the plugin passing user supplied input to eval(). This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-95
References: https://plugins.trac.wordpress.org/browser/w3speedster-wp/trunk/w3speedster.php#L740; https://plugins.trac.wordpress.org/changeset/3175640/; https://www.wordfence.com/threat-intel/vulnerabilities/id/2a56eb63-ba5c-4452-8ab9-f5aeaf53adda?source=cve
CVE: CVE-2024-9388
Published: 2024-10-30
Description: The Black Widgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/black-widgets/trunk/includes/class-bw.php#L95; https://plugins.trac.wordpress.org/changeset/3178366/; https://wordpress.org/plugins/black-widgets/#developers
CVE: CVE-2024-10525
Published: 2024-10-30
Description: In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/eclipse-mosquitto/mosquitto/commit/8ab20b4ba4204fdcdec78cb4d9f03c944a6e0e1c; https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/190; https://mosquitto.org/blog/2024/10/version-2-0-19-released/
CVE: CVE-2024-3935
Published: 2024-10-30
Description: In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://github.com/eclipse-mosquitto/mosquitto/commit/ae7a804dadac8f2aaedb24336df8496a9680fda9; https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/197; https://mosquitto.org/blog/2024/10/version-2-0-19-released/
CVE: CVE-2024-51304
Published: 2024-10-30
Description: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldap_search_dn function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/fu37kola/cve/blob/main/DrayTek/Vigor3900/1.5.1.3/DrayTek_Vigor_3900_1.5.1.3.pdf
CVE: CVE-2024-23309
Published: 2024-10-30
Description: The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-291
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1996; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1996
CVE: CVE-2024-24777
Published: 2024-10-30
Description: A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1981; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1981
CVE: CVE-2024-28052
Published: 2024-10-30
Description: The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while aiming to be easy to configure and operate. In addition to providing a WiFi access point, the device serves as a 4-port wired router and implements a variety of common SOHO router capabilities such as port forwarding, quality-of-service, web-based administration, a DHCP server, a basic DMZ, and UPnP capabilities.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-131
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1997; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1997
CVE: CVE-2024-28875
Published: 2024-10-30
Description: A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910

    80100910 40 6d 21 74        ds         "@m!t2K1"
             32 4b 31 00
             
It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below:

    if ((SECOND_FROM_BOOT_TIME < 300) &&
        (is_equal = strcmp(password,"@m!t2K1")) {
            return 1;}
            
Where 1 is the return value to admin-level access (0 being fail and 3 being user).
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1979; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1979
CVE: CVE-2024-31151
Published: 2024-10-30
Description: A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The password string can be found at addresses 0x 803cdd0f and 0x803da3e6:

    803cdd0f 41 72 69 65        ds         "AriesSerenaCairryNativitaMegan"
             73 53 65 72 
             65 6e 61 43
             ...

It is referenced by the function at 0x800b78b0 and simplified in the pseudocode below:

    if (is_equal = strcmp(password,"AriesSerenaCairryNativitaMegan"){
        ret = 3;}

Where 3 is the return value to user-level access (0 being fail and 1 being admin/backdoor).

While there's no legitimate functionality to change this password, once authenticated it is possible manually make a change by taking advantage of TALOS-2024-XXXXX using HTTP POST paramater "Pu" (new user password) in place of "Pa" (new admin password).
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1979; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1979
CVE: CVE-2024-31152
Published: 2024-10-30
Description: The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1982; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1982
CVE: CVE-2024-32946
Published: 2024-10-30
Description: A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via Web and FTP services, exposing it to network sniffing attacks.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1983; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1983
CVE: CVE-2024-33603
Published: 2024-10-30
Description: The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1985; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1985
CVE: CVE-2024-33623
Published: 2024-10-30
Description: A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-835
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2001; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2001
CVE: CVE-2024-33626
Published: 2024-10-30
Description: The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the device's WiFi network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1986; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1986
CVE: CVE-2024-33699
Published: 2024-10-30
Description: The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-620
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1984; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1984
CVE: CVE-2024-33700
Published: 2024-10-30
Description: The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1998; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1998