PT-2024-5762 · Vonets · Vonets Industrial Wifi Bridge Relays+1
Wodzen
·
Published
2024-08-01
·
Updated
2024-08-20
·
CVE-2024-41936
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior
Description
A directory traversal vulnerability enables an unauthenticated remote attacker to read arbitrary files and bypass authentication. The issue arises from an input validation error when processing directory traversal sequences, allowing an attacker to exploit the vulnerability using a specially crafted HTTP request.
Recommendations
For versions 3.3.23.6.9 and prior, update to a version that fixes the directory traversal vulnerability.
As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
Avoid using the vulnerable software until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vonets Industrial Wifi Bridge Relays
Vonets Wifi Bridge Repeaters