CVE-2024-24777: LEVEL1 Wbr-6012 Firmware

High severity, CVSS 8.8. EPSS: 8.7% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious web page to trigger this vulnerability.

Affected products

• LEVEL1 Wbr-6012 Firmware: version r0.40e6 only

Published 2024-10-30. Last modified 2026-06-17.