CVE-2024-42001

Name of the Vulnerable Software and Affected Versions Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior

Description The issue is related to an improper authentication mechanism in the software, allowing an unauthenticated remote attacker to bypass authentication via a specially crafted direct request when another user has an active session. This can be exploited by sending a direct request to the device when an active session is present.

Recommendations For versions 3.3.23.6.9 and prior, as a temporary workaround, consider restricting access to the device when an active session is present to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.