Vonets Vap11g-300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Vonets Vap11g-300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2024-39791 — CVSS 10.0 (critical): Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions…
• CVE-2024-39815 — CVSS 9.1 (critical): Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge…
• CVE-2024-37023 — CVSS 9.1 (critical): Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions…
• CVE-2024-42001 — CVSS 8.6 (high): An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions…
• CVE-2024-29082 — CVSS 8.6 (high): Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions…
• CVE-2024-46329 — CVSS 8.0 (high): VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.
• CVE-2024-46328 — CVSS 8.0 (high): VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.
• CVE-2024-41936 — CVSS 7.5 (high): A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9…
• CVE-2024-41161 — CVSS 7.5 (high): Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions…
• CVE-2024-46330 — CVSS 7.4 (high): VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.
• CVE-2024-46327 — CVSS 5.7 (medium): An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.