github - ghsa-cv6w-7hvv-mf8v

ghsa-cv6w-7hvv-mf8v

Vulnerability from github

Published

2024-11-29 06:35

Modified

2024-11-29 06:35

Severity ?

10.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

Certain modes of in-vehicle routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-11980",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-306",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-11-29T06:15:06Z",
      severity: "CRITICAL",
   },
   details: "Certain modes of in-vehicle routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.",
   id: "GHSA-cv6w-7hvv-mf8v",
   modified: "2024-11-29T06:35:29Z",
   published: "2024-11-29T06:35:29Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-11980",
      },
      {
         type: "WEB",
         url: "https://www.twcert.org.tw/en/cp-139-8274-01e55-2.html",
      },
      {
         type: "WEB",
         url: "https://www.twcert.org.tw/tw/cp-132-8273-95a07-1.html",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

CVE-2024-11980 (GCVE-0-2024-11980)

Vulnerability from cvelistv5

Published

2024-11-29 06:03

Modified

2024-11-29 14:40

Severity ?

8.6 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Summary

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.

References

▼	URL	Tags
	https://www.twcert.org.tw/tw/cp-132-8273-95a07-1.html	third-party-advisory
	https://www.twcert.org.tw/en/cp-139-8274-01e55-2.html	third-party-advisory

Impacted products

Vendor

Product

Version

▼

Billion Electric

M100

Version: 1.04.1.592.*   < 1.04.1.592.8
Version: 1.04.1.613.*   < 1.04.613.13
Version: 1.04.1.*   < 1.04.1.675

Billion Electric	M150	Version: 1.04.1.592.* < 1.04.1.592.8 Version: 1.04.1.613.* < 1.04.613.13 Version: 1.04.1.* < 1.04.1.675
Billion Electric	M120N	Version: 1.04.1.592.* < 1.04.1.592.8 Version: 1.04.1.613.* < 1.04.613.13 Version: 1.04.1.* < 1.04.1.675
Billion Electric	M500	Version: 1.04.1.592.* < 1.04.1.592.8 Version: 1.04.1.613.* < 1.04.613.13 Version: 1.04.1.* < 1.04.1.675

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:billion_electric:m150:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "m150",
                  vendor: "billion_electric",
                  versions: [
                     {
                        lessThan: "1.04.1.592.8",
                        status: "affected",
                        version: "1.04.1.592.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.613.13",
                        status: "affected",
                        version: "1.04.1.613.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.1.675",
                        status: "affected",
                        version: "1.04.1.* <",
                        versionType: "custom",
                     },
                  ],
               },
               {
                  cpes: [
                     "cpe:2.3:a:billion_electric:m150:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "m150",
                  vendor: "billion_electric",
                  versions: [
                     {
                        lessThan: "1.04.1.592.8",
                        status: "affected",
                        version: "1.04.1.592.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.613.13",
                        status: "affected",
                        version: "1.04.1.613.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.1.675",
                        status: "affected",
                        version: "1.04.1.* <",
                        versionType: "custom",
                     },
                  ],
               },
               {
                  cpes: [
                     "cpe:2.3:a:billion_electric:m120n:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "m120n",
                  vendor: "billion_electric",
                  versions: [
                     {
                        lessThan: "1.04.1.592.8",
                        status: "affected",
                        version: "1.04.1.592.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.613.13",
                        status: "affected",
                        version: "1.04.1.613.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.1.675",
                        status: "affected",
                        version: "1.04.1.* <",
                        versionType: "custom",
                     },
                  ],
               },
               {
                  cpes: [
                     "cpe:2.3:a:billion_electric:m500:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "m500",
                  vendor: "billion_electric",
                  versions: [
                     {
                        lessThan: "1.04.1.592.8",
                        status: "affected",
                        version: "1.04.1.592.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.613.13",
                        status: "affected",
                        version: "1.04.1.613.*",
                        versionType: "custom",
                     },
                     {
                        lessThan: "1.04.1.675",
                        status: "affected",
                        version: "1.04.1.* <",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-11980",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-29T14:32:57.290762Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-29T14:40:54.541Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "M100",
               vendor: "Billion Electric",
               versions: [
                  {
                     lessThan: "1.04.1.592.8",
                     status: "affected",
                     version: "1.04.1.592.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.613.13",
                     status: "affected",
                     version: "1.04.1.613.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.1.675",
                     status: "affected",
                     version: "1.04.1.*",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unaffected",
               product: "M150",
               vendor: "Billion Electric",
               versions: [
                  {
                     lessThan: "1.04.1.592.8",
                     status: "affected",
                     version: "1.04.1.592.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.613.13",
                     status: "affected",
                     version: "1.04.1.613.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.1.675",
                     status: "affected",
                     version: "1.04.1.*",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unaffected",
               product: "M120N",
               vendor: "Billion Electric",
               versions: [
                  {
                     lessThan: "1.04.1.592.8",
                     status: "affected",
                     version: "1.04.1.592.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.613.13",
                     status: "affected",
                     version: "1.04.1.613.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.1.675",
                     status: "affected",
                     version: "1.04.1.*",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unaffected",
               product: "M500",
               vendor: "Billion Electric",
               versions: [
                  {
                     lessThan: "1.04.1.592.8",
                     status: "affected",
                     version: "1.04.1.592.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.613.13",
                     status: "affected",
                     version: "1.04.1.613.*",
                     versionType: "custom",
                  },
                  {
                     lessThan: "1.04.1.675",
                     status: "affected",
                     version: "1.04.1.*",
                     versionType: "custom",
                  },
               ],
            },
         ],
         datePublic: "2024-11-29T05:51:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.<br>",
                  },
               ],
               value: "Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.",
            },
         ],
         impacts: [
            {
               capecId: "CAPEC-37",
               descriptions: [
                  {
                     lang: "en",
                     value: "CAPEC-37 Retrieve Embedded Sensitive Data",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-306",
                     description: "CWE-306 Missing Authentication for Critical Function",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-29T08:39:12.739Z",
            orgId: "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
            shortName: "twcert",
         },
         references: [
            {
               tags: [
                  "third-party-advisory",
               ],
               url: "https://www.twcert.org.tw/tw/cp-132-8273-95a07-1.html",
            },
            {
               tags: [
                  "third-party-advisory",
               ],
               url: "https://www.twcert.org.tw/en/cp-139-8274-01e55-2.html",
            },
         ],
         solutions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "For firmware version 1.04.1.592.x, please update to 1.04.1.592.8 or later.<br>For firmware version 1.04.1.613.x, please update to 1.04.1.613.13 or later.<br>For all other firmware version 1.04.1.x, please update to 1.04.1.675 or later.<br>",
                  },
               ],
               value: "For firmware version 1.04.1.592.x, please update to 1.04.1.592.8 or later.\nFor firmware version 1.04.1.613.x, please update to 1.04.1.613.13 or later.\nFor all other firmware version 1.04.1.x, please update to 1.04.1.675 or later.",
            },
         ],
         source: {
            advisory: "TVN-202411025",
            discovery: "EXTERNAL",
         },
         title: "Billion Electric router - Missing Authentication",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
      assignerShortName: "twcert",
      cveId: "CVE-2024-11980",
      datePublished: "2024-11-29T06:03:04.983Z",
      dateReserved: "2024-11-29T01:52:18.057Z",
      dateUpdated: "2024-11-29T14:40:54.541Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted