Description (CNA)
An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a specially crafted direct request when another user has an active session.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Vonets / VAR1200-H | affected 0 through 3.3.23.6.9 |
| Vonets / VAR1200-L | affected 0 through 3.3.23.6.9 |
| Vonets / VAR600-H | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11AC | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11G-500S | affected 0 through 3.3.23.6.9 |
| Vonets / VBG1200 | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11S-5G | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11S | affected 0 through 3.3.23.6.9 |
| Vonets / VAR11N-300 | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11G-300 | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11N-300 | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11G | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11G-500 | affected 0 through 3.3.23.6.9 |
| Vonets / VBG1200 | affected 0 through 3.3.23.6.9 |
| Vonets / VAP11AC | affected 0 through 3.3.23.6.9 |
| Vonets / VGA-1000 | affected 0 through 3.3.23.6.9 |
CWE
CWE-425
References
ADP enrichment
No English description supplied.
No references supplied.