5.9
CVE-2024-32946
- EPSS 0.15%
- Veröffentlicht 30.10.2024 14:15:06
- Zuletzt bearbeitet 21.11.2024 09:16:05
- Quelle talos-cna@cisco.com
- CVE-Watchlists
- Unerledigt
A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be transmitted in cleartext via Web and FTP services, exposing it to network sniffing attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Level1 ≫ Wbr-6012 Firmware Versionr0.40e6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.355 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| talos-cna@cisco.com | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-319 Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.