CVE-2024-23309

8.1 highEPSS 0.9%

High (8.1) in level1 wbr-6012 firmware. EPSS 0.9% chance of exploitation in the next 30 days.

The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-291
Published: 2024-10-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

level1:wbr-6012_firmware

References

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1996
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1996

Check your stack JSON