PT-2024-5764 · Vonets · Vonets Industrial Wifi Bridge Relays+1

Wodzen · Published 2024-08-01 · Updated 2024-08-20 · CVE-2024-42001

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior

Description The issue is related to an improper authentication mechanism in the software, allowing an unauthenticated remote attacker to bypass authentication via a specially crafted direct request when another user has an active session. This can be exploited by sending a direct request to the device when an active session is present.

Recommendations For versions 3.3.23.6.9 and prior, as a temporary workaround, consider restricting access to the device when an active session is present to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-425

Related Identifiers

BDU:2024-06477

CVE-2024-42001

Affected Products

Vonets Industrial Wifi Bridge Relays

Vonets Wifi Bridge Repeaters

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-42001 · Security Note
• https://osv.dev/vulnerability/CVE-2024-42001 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06477 · Security Note
• https://t.me/cvenotify/91370 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-214-08 · Note
• https://cybersecurity-help.cz/vdb/SB2024080225 · Note
• https://twitter.com/cracbot/status/1824325318037082123 · Twitter Post
• https://twitter.com/cracbot/status/1823600527273550286 · Twitter Post
• https://vuldb.com/?id.273481 · Note
• https://twitter.com/cracbot/status/1823962921371898108 · Twitter Post
• https://cert.vde.com/en/bulletins/bulletins/1935-vonets-wifi-bridges · Note