Home/Product/vonets vap11g 300 firmware
Product

vonets vap11g 300 firmware

11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2024-46330
all versions
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.
7.4HIGH
CVE-2024-46329
all versions
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.
8.0HIGH
CVE-2024-46328
all versions
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including
8.0HIGH
CVE-2024-46327
all versions
An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory tra
5.7MEDIUM
CVE-2024-42001
<= 3.3.23.6.9
An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, softwa
8.6HIGH
CVE-2024-41936
<= 3.3.23.6.9
A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.
7.5HIGH
CVE-2024-39815
<= 3.3.23.6.9
Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi b
9.1CRITICAL
CVE-2024-39791
<= 3.3.23.6.9
Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, softw
10.0CRITICAL
CVE-2024-37023
<= 3.3.23.6.9
Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, softwar
9.1CRITICAL
CVE-2024-29082
<= 3.3.23.6.9
Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software version
8.6HIGH
CVE-2024-41161
<= 3.3.23.6.9
Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software ver
7.5HIGH
threatengine.sh