Approved changes feed: RSS · Atom
cpe:2.3:h:levelone:wbr-6012:*:*:*:*:*:*:*:*
part: h version: * update: *
| Vendor | Levelone (58df4e12-104e-57e7-af7c-cb4ebdbed65b) |
|---|---|
| Product | Wbr 6012 (47d88749-65a9-5671-9b0f-9aca9991d6ef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-28875 |
vulnerable | 2026-06-08 06:33:27.783137 |
Details available
HIGH (8.1)
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910
80100910 40 6d 21 74 ds "@m!t2K1"
32 4b 31 00
It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below:
if ((SECOND_FROM_BOOT_TIME < 300) &&
(is_equal = strcmp(password,"@m!t2K1")) {
return 1;}
Where 1 is the return value to admin-level access (0 being fail and 3 being user).
Published: 2024-10-30T13:35:19.982Z
Updated: 2025-11-03T21:54:34.037Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24777 |
vulnerable | 2026-06-08 06:29:41.707759 |
Details available
HIGH (8.8)
A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.
Published: 2024-10-30T13:35:19.175Z
Updated: 2024-10-30T15:03:06.843Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.