CVE-2024-24777

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

Affected

LevelOne · WBR-6012

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

8.68% chance of exploitation in the next 30 days, 95th percentile

Published

2024-10-30

Proof-of-concept exploits (1)

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1981

References

• CVE Record
• NVD entry