Skip to content
Connect AISign inSign up free
CVE-2024-290828.6HighCWE-284

CVE-2024-29082: Vonets WiFi Bridges Improper Access Control

Vonets · VAR1200-H

Affected: Vonets VAR1200-H · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.8%probability of exploitation in the next 30 days
57th percentile
050100

Higher than 57% of scored CVEs

8.6HighCVSS 3.1
LowHigh

DescriptionCVE.org

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints.

Affected products16

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Vonets · VAR1200-Hup to and including 3.3.23.6.9
  • Vonets · VAR1200-Lup to and including 3.3.23.6.9
  • Vonets · VAR600-Hup to and including 3.3.23.6.9
  • Vonets · VAP11ACup to and including 3.3.23.6.9
  • Vonets · VAP11G-500Sup to and including 3.3.23.6.9
  • Vonets · VBG1200up to and including 3.3.23.6.9
  • Vonets · VAP11S-5Gup to and including 3.3.23.6.9
  • Vonets · VAP11Sup to and including 3.3.23.6.9
  • Vonets · VAR11N-300up to and including 3.3.23.6.9
  • Vonets · VAP11G-300up to and including 3.3.23.6.9
  • Vonets · VAP11N-300up to and including 3.3.23.6.9
  • Vonets · VAP11Gup to and including 3.3.23.6.9
  • Vonets · VAP11G-500up to and including 3.3.23.6.9
  • Vonets · VBG1200up to and including 3.3.23.6.9
  • Vonets · VAP11ACup to and including 3.3.23.6.9
  • Vonets · VGA-1000up to and including 3.3.23.6.9

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Vonets
Published
August 2024

CoverageNo articles yet

No CyberSIXT article names CVE-2024-29082 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References