Read the docs

Level1

Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

Level1 records in CISA KEV

No Level1 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

12 records in Wbr-6012 Firmware · all components

Priority HIGH 76

The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.1122 Published 2024-10-30 No fix listed CWE-620
Priority HIGH 73

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08676 Published 2024-10-30 No fix listed CWE-352
Priority HIGH 72

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00824 Published 2024-10-30 No fix listed CWE-20
Priority HIGH 72

The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1783 Published 2024-10-30 No fix listed CWE-400
TI-2024-18645 CVE-2024-28052 · GHSA-pr83-52rx-w5f5

The WBR-6012 is a wireless SOHO router.

Priority HIGH 72

The WBR-6012 is a wireless SOHO router.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00703 Published 2024-10-30 No fix listed CWE-131
TI-2024-22207 CVE-2024-33623 · GHSA-276c-c7gr-r4j6

Infinite loop in LevelOne WBR-6012

Priority MEDIUM 47

A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11895 Published 2024-10-30 No fix listed CWE-835
TI-2024-20528 CVE-2024-31151 · GHSA-q63q-pqgx-268p

Hard-coded credentials in LevelOne WBR-6012

Priority MEDIUM 44

A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2024-10-30 No fix listed CWE-798
TI-2024-22190 CVE-2024-33603 · GHSA-qjqh-fr2p-8mpm

Information disclosure in LevelOne WBR-6012

Priority MEDIUM 41

The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08601 Published 2024-10-30 No fix listed CWE-200
TI-2024-19072 CVE-2024-28875 · GHSA-4fj6-9r38-4v86

Hard-coded credentials in LevelOne WBR-6012

Priority LOW 38

A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00686 Published 2024-10-30 No fix listed CWE-798
TI-2024-22210 CVE-2024-33626 · GHSA-p2c8-3p7x-5wc8

Information disclosure in LevelOne WBR-6012

Priority LOW 30

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP requ…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00417 Published 2024-10-30 No fix listed CWE-200
Priority LOW 26

A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via Web and FTP services, exposing it to network sniffing attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00286 Published 2024-10-30 No fix listed CWE-319
Open these records in search →