CVE-2024-28052 Integer overflow in WBR-6012
Integer overflow in LevelOne WBR-6012 router allows attackers to execute arbitrary code or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-28052?
CVE-2024-28052 is a medium-severity vulnerability in LevelOne WBR-6012, published on 30 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while aiming to be easy to configure and operate. In addition to providing a WiFi access point, the device serves as a 4-port wired router and implements a variety of common SOHO router capabilities such as port forwarding, quality-of-service, web-based administration, a DHCP server, a basic DMZ, and UPnP capabilities.
Weakness: CWE-131
Which versions are affected by CVE-2024-28052?
It affects 1 product.
Products include Level1 Wbr-6012 Firmware.
How do I fix CVE-2024-28052?
No fix has been published for CVE-2024-28052 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-28052 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-28052 exists.
Other vulnerabilities in LevelOne WBR-6012
Sources
Also known as GHSA-pr83-52rx-w5f5.