Vonets records
11 published records for vendor vonets.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-284 Improper Access Control1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-703 Improper Check or Handling of Exceptional Conditions1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-39791No exploit | Vonets WiFi Bridges Stack-based Buffer Overflowvonets · var1200-h firmware · CWE-121 | Critical10.0 | — | 1.1% | Aug 12, 2024 |
37Monitor | CVE-2024-37023No exploit | Vonets WiFi Bridges Command Injectionvonets · var1200-h firmware · CWE-77 | Critical9.4 | — | 1.3% | Aug 12, 2024 |
37Monitor | CVE-2024-39815No exploit | Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditionsvonets · var1200-h firmware · CWE-703 | Critical9.4 | — | 0.8% | Aug 12, 2024 |
35Monitor | CVE-2024-41936No exploit | Vonets WiFi Bridges Path Traversalvonets · var1200-h firmware · CWE-22 | High8.7 | — | 1.7% | Aug 12, 2024 |
35Monitor | CVE-2024-29082No exploit | Vonets WiFi Bridges Improper Access Controlvonets · var1200-h firmware · CWE-284 | High8.8 | — | 0.8% | Aug 12, 2024 |
34Monitor | CVE-2024-41161No exploit | Vonets WiFi Bridges Use of Hard-coded Credentialsvonets · var1200-h firmware · CWE-798 | High8.7 | — | 0.6% | Aug 8, 2024 |
32Monitor | CVE-2024-46329No exploit | VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.vonets · vap11g-300 firmware · CWE-78 | High8.0 | — | 0.8% | Sep 26, 2024 |
32Monitor | CVE-2024-46328No exploit | VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.vonets · vap11g-300 firmware · CWE-259 | High8.0 | — | 0.2% | Sep 26, 2024 |
29Monitor | CVE-2024-46330No exploit | VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.vonets · vap11g-300 firmware · CWE-78 | High7.4 | — | 0.8% | Sep 26, 2024 |
24Monitor | CVE-2024-42001No exploit | Vonets WiFi Bridges Forced Browsingvonets · var1200-h firmware · CWE-425 | Medium6.1 | — | 0.7% | Aug 12, 2024 |
22Monitor | CVE-2024-46327No exploit | An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.vonets · vap11g-300 firmware · CWE-22 | Medium5.7 | — | 0.4% | Sep 26, 2024 |
- CVE-2024-3979140Plan
Vonets WiFi Bridges Stack-based Buffer Overflow
CriticalCVSS 10.0No exploitEPSS 1%vonets · var1200-h firmwareAug 12, 2024
- CVE-2024-3702337Monitor
Vonets WiFi Bridges Command Injection
CriticalCVSS 9.4No exploitEPSS 1%vonets · var1200-h firmwareAug 12, 2024
- CVE-2024-3981537Monitor
Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions
CriticalCVSS 9.4No exploitEPSS 1%vonets · var1200-h firmwareAug 12, 2024
- CVE-2024-4193635Monitor
Vonets WiFi Bridges Path Traversal
HighCVSS 8.7No exploitEPSS 2%vonets · var1200-h firmwareAug 12, 2024
- CVE-2024-2908235Monitor
Vonets WiFi Bridges Improper Access Control
HighCVSS 8.8No exploitEPSS 1%vonets · var1200-h firmwareAug 12, 2024
- CVE-2024-4116134Monitor
Vonets WiFi Bridges Use of Hard-coded Credentials
HighCVSS 8.7No exploitEPSS 1%vonets · var1200-h firmwareAug 8, 2024
- CVE-2024-4632932Monitor
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.
HighCVSS 8.0No exploitEPSS 1%vonets · vap11g-300 firmwareSep 26, 2024
- CVE-2024-4632832Monitor
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.
HighCVSS 8.0No exploitEPSS 0%vonets · vap11g-300 firmwareSep 26, 2024
- CVE-2024-4633029Monitor
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.
HighCVSS 7.4No exploitEPSS 1%vonets · vap11g-300 firmwareSep 26, 2024
- CVE-2024-4200124Monitor
Vonets WiFi Bridges Forced Browsing
MediumCVSS 6.1No exploitEPSS 1%vonets · var1200-h firmwareAug 12, 2024
- CVE-2024-4632722Monitor
An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.
MediumCVSS 5.7No exploitEPSS 0%vonets · vap11g-300 firmwareSep 26, 2024