CVE-2024-33699

CVE-2024-33699 describes a critical vulnerability in the LevelOne WBR-6012 router, specifically firmware version R0.40e6, allowing an attacker to change the administrator password without prior authentication. This flaw, rated 8.8 HIGH on the CVSS scale, enables an unauthenticated attacker to gain full administrative control over the device, leading to complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is no evidence of active exploitation or significant community discussion, the high CVSS score and FAUCET Risk Score of 81/100 indicate a severe risk. Organizations using affected LevelOne WBR-6012 routers should monitor for vendor patches and consider mitigation strategies.