PT-2024-5760 · Vonets · Vonets Industrial Wifi Bridge Relays+1

Wodzen · Published 2024-08-01 · Updated 2024-08-20 · CVE-2024-39815

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior

Description The issue is related to an improper check or handling of exceptional conditions, which enables an unauthenticated remote attacker to cause a denial of service. This can be achieved by sending a specially-crafted HTTP request to pre-authentication resources, resulting in a service crash.

Recommendations For versions 3.3.23.6.9 and prior, update to version 3.3.23.6.9 or later as soon as possible to resolve the issue. As a temporary workaround, consider restricting access to pre-authentication resources to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-703

Related Identifiers

BDU:2024-06473

CVE-2024-39815

Affected Products

Vonets Industrial Wifi Bridge Relays

Vonets Wifi Bridge Repeaters

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2024-39815 · Security Note
• https://bdu.fstec.ru/vul/2024-06473 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39815 · Vendor Advisory
• https://twitter.com/cracbot/status/1824325297300443421 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-214-08 · Note
• https://cybersecurity-help.cz/vdb/SB2024080225 · Note
• https://t.me/cvenotify/91390 · Telegram Post
• https://vuldb.com/?id.273479 · Note
• https://twitter.com/cracbot/status/1823962904103940541 · Twitter Post
• https://twitter.com/cracbot/status/1823600509879808083 · Twitter Post
• https://cert.vde.com/en/bulletins/bulletins/1935-vonets-wifi-bridges · Note
• https://twitter.com/CveFindCom/status/1822937314063954383 · Twitter Post
• https://twitter.com/cracbot/status/1823238168017326249 · Twitter Post