CVE-2024-33603

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Oct 30, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-336046.1A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker t CVE-2024-336057.5Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability. As for the details of affecte CVE-2024-336068.8An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a Mi CVE-2024-336075.6Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enab CVE-2024-336087.5When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: CVE-2024-33618.8A vulnerability has been found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2024-336109.1"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' sessio CVE-2024-336113.4Improper input validation for some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow a privileged user to po CVE-2024-336126.8An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance CVE-2024-336158.8A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file CVE-2024-336165.3Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp CVE-2024-336175.9Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure