PT-2024-13368 · Levelone · Levelone Wbr-6013

Francesco Benvenuto · Published 2024-07-08 · Updated 2024-07-11 · CVE-2023-46685

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LevelOne WBR-6013 version RER4 A v3411b 2T2R LEV 09 170623

Description A hard-coded password vulnerability exists in the telnetd functionality, allowing attackers to execute arbitrary commands via specially crafted network packets. This issue puts thousands of LevelOne WBR-6013 routers at risk of complete takeover, potentially granting attackers unfettered access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2023-46685

Affected Products

Levelone Wbr-6013

References · 14

• https://osv.dev/vulnerability/CVE-2023-46685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46685 · Security Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1871 · Note
• https://t.me/cvenotify/85373 · Telegram Post
• https://t.me/pentestingnews/48976 · Telegram Post
• https://t.me/cvenotify/85871 · Telegram Post
• https://twitter.com/cracbot/status/1810554599625097344 · Twitter Post
• https://twitter.com/cracbot/status/1811279316485066921 · Twitter Post
• https://twitter.com/CVEnew/status/1810337798911619126 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1810850287441301628 · Twitter Post
• https://twitter.com/autumn_good_35/status/1810668762397565267 · Twitter Post
• https://twitter.com/CveFindCom/status/1810336156355047902 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810405519464538162 · Twitter Post
• https://twitter.com/fridaysecurity/status/1810849995379126615 · Twitter Post