CyberSecBulletin

Vonets vulnerabilities

We track 7 vulnerabilities in Vonets products across 28 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2024.

7vulnerabilities
4critical
3high
0exploited
9.0average CVSS score

Latest Vonets vulnerabilities

  • 9.8 Critical severity

    VAR1200-H: Direct Request

    CVE-2024-42001Vonets

    An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a specially crafted direct request

  • 7.5 High severity

    VAR1200-H: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-41936VonetsEPSS 1.7%

    A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication.

  • 7.5 High severity

    VAR1200-H: Improper Check or Handling of Exceptional Conditions

    CVE-2024-39815Vonets

    Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A speci

  • 9.8 Critical severity

    VAR1200-H: Out-of-bounds Write

    CVE-2024-39791VonetsEPSS 1.11%

    Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code.

  • 9.9 Critical severity

    VAR1200-H: Improper Neutralization of Special Elements used in a Command

    CVE-2024-37023VonetsEPSS 1.26%

    Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parame

  • 8.6 High severity

    VAR1200-H: Improper Access Control

    CVE-2024-29082Vonets

    Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprote

  • 9.8 Critical severity

    VAR1200-H: Use of Hard-coded Credentials

    CVE-2024-41161Vonets

    Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator cre