How severe is CVE-2024-23309?

CVE-2024-23309 has a CVSS 3.x base score of 9.0, rated critical severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2024-23309 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-23309?

CVE-2024-23309 affects Level1 Wbr-6012 Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-23309?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2024-23309 have an EU (EUVD) identifier?

Yes. CVE-2024-23309 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-34425.

When was CVE-2024-23309 published?

CVE-2024-23309 was published on 2024-10-30 and last updated on 2026-06-17.

CVE-2024-23309

CVE-2024-23309 is a critical-severity vulnerability in Level1 Wbr-6012 Firmware with a CVSS 3.x base score of 9.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-291.

Key facts

Severity: Critical (CVSS 3.x base score 9.0)
EPSS exploit prediction: 1% (56th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-34425
Weakness: CWE-291
Affected product: Level1 Wbr-6012 Firmware
Published: 2024-10-30
Last modified: 2026-06-17

Description

The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.

Frequently asked questions

What is CVE-2024-23309?: The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a session token.
How severe is CVE-2024-23309?: CVE-2024-23309 has a CVSS 3.x base score of 9.0, rated critical severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2024-23309 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-23309?: CVE-2024-23309 affects Level1 Wbr-6012 Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-23309?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2024-23309 have an EU (EUVD) identifier?: Yes. CVE-2024-23309 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-34425.
When was CVE-2024-23309 published?: CVE-2024-23309 was published on 2024-10-30 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:level1:wbr-6012_firmware:r0.40e6:*:*:*:*:*:*:*

More vulnerabilities in Level1 Wbr-6012 Firmware

CVE-2024-33699 — Critical (CVSS 9.9): The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers…
CVE-2024-24777 — High (CVSS 8.8): A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012…
CVE-2024-31151 — High (CVSS 8.1): A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain…
CVE-2024-28875 — High (CVSS 8.1): A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain…
CVE-2024-33700 — High (CVSS 7.5): The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP…
CVE-2024-32946 — Medium (CVSS 5.9): A vulnerability in the LevelOne WBR-6012 router's firmware version R0.40e6 allows sensitive information to be…

All CVEs affecting Level1 Wbr-6012 Firmware →

Other CWE-291 vulnerabilities

CVE-2025-66602 — Critical (CVSS 9.8): A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server…
CVE-2022-46415 — Critical (CVSS 9.1): DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP…
CVE-2025-34202 — High (CVSS 8.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA…
CVE-2025-59101 — High (CVSS 7.7): Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has…
CVE-2026-3690 — High (CVSS 7.4): OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass…
CVE-2023-35906 — Medium (CVSS 5.3): IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM…

Browse all CWE-291 vulnerabilities →