CVE-2024-28875 is a high-severity hard-coded credentials vulnerability affecting LevelOne WBR-6012 routers, allowing unauthorized administrative access. Attackers can exploit this flaw within the first 30 seconds of the device booting, or indefinitely if other vulnerabilities force a reboot. With a CVSS score of 8.1, the attack is network-based, requires no user interaction, and can lead to complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, the presence of a backdoor string ("@m!t2K1") makes this a critical concern for affected devices.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
r0.40e6CPE matchmatch criteria | cpe:2.3:o:level1:wbr-6012_firmware:r0.40e6:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.