CVE-2024-36821: High severity linksys velop whw0101 vulnerability
Published Jun 11, 2024
·Updated
Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.
Affected Software
2 affected components
All of the following
LinkSys Velop Whw0101 Firmware=1.1.13.202617
LinkSys Velop Whw0101
Event History
Jun 11, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36821?
CVE-2024-36821 has a medium severity rating due to the potential for privilege escalation from Guest to root in Linksys Velop WiFi systems.
2
How do I fix CVE-2024-36821?
To fix CVE-2024-36821, users should update their Linksys Velop WHW01v1 firmware to the latest patched version.
3
Who is affected by CVE-2024-36821?
CVE-2024-36821 affects users of the Linksys Velop WHW01v1 running firmware version 1.1.13.202617.
4
What type of vulnerability is CVE-2024-36821?
CVE-2024-36821 is classified as an insecure permissions vulnerability allowing privilege escalation.
5
What devices are impacted by CVE-2024-36821?
The vulnerability CVE-2024-36821 specifically impacts the Linksys Velop WHW01v1 device.