Vonets WiFi Devices Vulnerable: Hard-Coded Credentials, Command Injection, and More!
Attention, network defenders! Vonets devices are under siege by a slew of vulnerabilities, including hard-coded credentials and buffer overflows. Exploitable remotely with low attack complexity, these flaws could let attackers execute arbitrary code or cause a denial-of-service. Time to batten down the hatches and secure your networks!
Hot Take:
Vonets’ devices have more holes than a Swiss cheese factory! With CVSS scores hitting the roof, these WiFi bridges and repeaters are practically begging for a cyber smackdown. Time to batten down the hatches and hope your firewall is as solid as your WiFi signal!
Key Points:
- CVSS v4 scores max out at an impressive 10.0
- Vulnerabilities include hard-coded credentials, improper access control, and command injection
- Multiple Vonets products affected, including VAR1200 and VAP11 series
- Potential impacts: unauthorized access, denial-of-service, and arbitrary code execution
- Vonets has yet to cooperate with CISA on mitigation efforts
Already a member? Log in here