CVE-2024-31151

CVE-2024-31151 is a critical security flaw in LevelOne WBR-6012 routers, stemming from hard-coded credentials that allow unauthorized access to web services. Attackers can exploit this vulnerability within 30 seconds of a device reboot, with other vulnerabilities potentially forcing reboots to bypass this time restriction. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating potential future interest from threat actors.