by Kastro
Paper/Archive/CVE-2024-39815

CVE-2024-39815

Vonets VAR1200-H — Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions

EPSS 0.8%CVSS 9.4
critical.is priorityof 100
39
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 55.7.557 × 2011.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A specially-crafted HTTP request to pre-authentication resources can crash the service.

Affected

ProductAffectedFixed inSource
VAR1200-H≤ 3.3.23.6.9–CNA
VAR1200-L≤ 3.3.23.6.9–CNA
VAR600-H≤ 3.3.23.6.9–CNA
VAP11AC≤ 3.3.23.6.9–CNA
VAP11G-500S≤ 3.3.23.6.9–CNA
VBG1200≤ 3.3.23.6.9–CNA
VAP11S-5G≤ 3.3.23.6.9–CNA
VAP11S≤ 3.3.23.6.9–CNA
VAR11N-300≤ 3.3.23.6.9–CNA
VAP11G-300≤ 3.3.23.6.9–CNA
VAP11N-300≤ 3.3.23.6.9–CNA
VAP11G≤ 3.3.23.6.9–CNA

Scores by source

icscert (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-24-214-08