ГлавнаяУязвимости → CVE-2024-24777
8.8высокая

CVE-2024-24777

Описание

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

Затрагиваемое ПО
Level1 Wbr-6012 firmwareLevel1 Wbr-6012
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1981https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1981