critical9.6
CVE-2024-40087
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions.
Impact
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions. Lack of authentication in the custom TCP service on port 5432 allows remote, unauthenticated attackers to gain administrative access over the router.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Viloliving | Vilo 5 Firmware | through 5.16.1.33 |