Approved changes feed: RSS · Atom

cpe:2.3:o:level1:wbr-6012_firmware:r0.40e6:*:*:*:*:*:*:*

part: o version: r0.40e6 update: *

VendorLevel1 (7b98111d-afa7-5db5-aa70-45a4cdbd6010)
ProductWbr 6012 Firmware (7838c246-1456-52ef-a16e-9c6a8e433a20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33700 vulnerable 2026-06-08 06:37:32.113925 Details available
HIGH (7.5)
The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption.
Published: 2024-10-30T13:35:13.936Z
Updated: 2024-10-30T15:03:15.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33699 vulnerable 2026-06-08 06:37:32.113524 Details available
CRITICAL (9.9)
The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password.
Published: 2024-10-30T13:35:17.397Z
Updated: 2024-10-30T15:03:14.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33626 vulnerable 2026-06-08 06:37:31.871009 Details available
MEDIUM (5.3)
The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the device's WiFi network.
Published: 2024-10-30T13:35:16.024Z
Updated: 2024-10-30T15:03:13.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33623 vulnerable 2026-06-08 06:37:31.867632 Details available
LOW (3.7)
A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2024-10-30T13:35:13.192Z
Updated: 2024-10-30T15:03:12.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33603 vulnerable 2026-06-08 06:37:31.778080 Details available
MEDIUM (5.3)
The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication.
Published: 2024-10-30T13:35:16.694Z
Updated: 2024-10-30T15:03:11.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32946 vulnerable 2026-06-08 06:37:24.753033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31152 vulnerable 2026-06-08 06:35:31.005102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31151 vulnerable 2026-06-08 06:35:31.003789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28875 vulnerable 2026-06-08 06:33:27.783235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28052 vulnerable 2026-06-08 06:33:26.295421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24777 vulnerable 2026-06-08 06:29:41.707843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23309 vulnerable 2026-06-08 06:29:37.250877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.