PT-2024-5761 · Vonets · Vonets Industrial Wifi Bridge Relays+1

Wodzen · Published 2024-08-01 · Updated 2024-08-20 · CVE-2024-41161

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters versions 3.3.23.6.9 and prior

Description The issue exists due to the presence of hard-coded credentials in the application code. This allows a remote attacker to bypass authentication using the hard-coded administrator credentials, which cannot be disabled.

Recommendations For versions 3.3.23.6.9 and prior, update the software to a version that does not contain the hard-coded credentials vulnerability. As a temporary workaround, consider changing the default credentials on all devices to minimize the risk of exploitation. Restrict access to the administrator accounts to prevent unauthorized access until a patch is available.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2024-06474

CVE-2024-41161

Affected Products

Vonets Industrial Wifi Bridge Relays

Vonets Industrial Wifi Bridge Repeaters

References · 11

• https://bdu.fstec.ru/vul/2024-06474 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41161 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41161 · Vendor Advisory
• https://vuldb.com/?id.273475 · Note
• https://twitter.com/oktsec/status/1823347363500433791 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-214-08 · Note
• https://t.me/cvedetector/2810 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024080225 · Note
• https://cert.vde.com/en/bulletins/bulletins/1935-vonets-wifi-bridges · Note
• https://t.me/cvenotify/91386 · Telegram Post
• https://twitter.com/cracbot/status/1823238138795581536 · Twitter Post