CVE-2024-24777

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Oct 30, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-247786.5Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. CVE-2024-247796.5Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create viCVE-2024-24789.8A vulnerability was found in BradWenqiang HR 2.0. It has been rated as critical. Affected by this issue is the function selectAll of the filCVE-2024-247809.8Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malCVE-2024-247817.5An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive CVE-2024-247824.3An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the CVE-2024-247835.9Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. ThisCVE-2024-247847.5The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment withCVE-2024-247855.4If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior ofCVE-2024-247867.5The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when uCVE-2024-247876.4On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of CVE-2024-247885.9A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.