47
CVE-2024-24777
PoC —CVSS 3.1
8.8 high
EPSS
8%p95
Published
()
Modified
Description
A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.
- Vendors
- level1
- Products
- wbr-6012 firmware
- Weakness
- CWE-352
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H