CVE-2024-32946 Information disclosure in WBR-6012

What is CVE-2024-32946?

CVE-2024-32946 is a medium-severity vulnerability in LevelOne WBR-6012, published on 30 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via Web and FTP services, exposing it to network sniffing attacks.

Weakness: CWE-319

Which versions are affected by CVE-2024-32946?

It affects 1 product.

Products include Level1 Wbr-6012 Firmware.

How do I fix CVE-2024-32946?

No fix has been published for CVE-2024-32946 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-32946 being exploited?

There is no known exploitation of CVE-2024-32946 in the wild and no public exploit code.

Other vulnerabilities in LevelOne WBR-6012

• CVE-2024-33699 Auth bypass in WBR-6012 Critical 9.9
• CVE-2024-23309 Auth bypass in WBR-6012 Critical 9.0
• CVE-2024-24777 Cross-site request forgery in WBR-6012 High 8.8
• CVE-2024-28875 Hardcoded credentials in WBR-6012 High 8.1
• CVE-2024-31151 Hardcoded credentials in WBR-6012 High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-59xm-4xxw-45c5.