high7.5
CVE-2024-41161
Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, e…
Impact
Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be disabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vonets | Var1200-H Firmware | through 3.3.23.6.9 |
| Vonets | Var1200-L Firmware | through 3.3.23.6.9 |
| Vonets | Var600-H Firmware | through 3.3.23.6.9 |
| Vonets | Vap11ac Firmware | through 3.3.23.6.9 |
| Vonets | Vap11g-500s Firmware | through 3.3.23.6.9 |
| Vonets | Vbg1200 Firmware | through 3.3.23.6.9 |
| Vonets | Vap11s-5g Firmware | through 3.3.23.6.9 |
| Vonets | Vap11s Firmware | through 3.3.23.6.9 |
| Vonets | Var11n-300 Firmware | through 3.3.23.6.9 |
| Vonets | Vap11g-300 Firmware | through 3.3.23.6.9 |
| Vonets | Vap11n-300 Firmware | through 3.3.23.6.9 |
| Vonets | Vap11g Firmware | through 3.3.23.6.9 |