CVE-2024-24777: CSRF

Published Oct 30, 2024

Updated

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

Affected Software

2 affected components

All of the following

Level1 Wbr-6012 Firmware=r0.40e6

Level1 Wbr-6012

Event History

Oct 30, 2024

CVE Published

via MITRE·01:35 PM

Data Sourced

via MITRE·01:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-24777?

The severity of CVE-2024-24777 is classified as medium due to potential unauthorized access via CSRF attacks.

How do I fix CVE-2024-24777?

To fix CVE-2024-24777, update the firmware of the LevelOne WBR-6012 to the latest version that addresses the CSRF vulnerability.

What type of vulnerability is CVE-2024-24777?

CVE-2024-24777 is a cross-site request forgery (CSRF) vulnerability.

Who is affected by CVE-2024-24777?

Users of the LevelOne WBR-6012 firmware version r0.40e6 are affected by CVE-2024-24777.

What can an attacker do with CVE-2024-24777?

An attacker can exploit CVE-2024-24777 to gain unauthorized access by triggering a specially crafted HTTP request.