CVE-2024-33700 Denial of service in WBR-6012

High 7.5 Published 30 Oct 2024 Updated 30 Oct 2024

Attackers can cause denial of service on LevelOne WBR-6012 routers by sending malformed FTP commands, leading to device reboots.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-33700?

CVE-2024-33700 is a high-severity denial of service vulnerability in LevelOne WBR-6012, published on 30 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption.

Weakness: CWE-20

Which versions are affected by CVE-2024-33700?

It affects 1 product.

Products include Level1 Wbr-6012 Firmware.

How do I fix CVE-2024-33700?

No fix has been published for CVE-2024-33700 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2024-33700 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-33700 exists.

Sources

Also known as GHSA-6qvq-5969-5wrp.