CVE-2024-33626: LEVEL1 Wbr-6012 Firmware

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the device's WiFi network.

Affected products

• LEVEL1 Wbr-6012 Firmware: version r0.40e6 only

Published 2024-10-30. Last modified 2026-06-17.