CVE-2024-11980CWE-306

Billion Electric router - Missing Authentication

High · published November 29, 2024

CVSS v3.1
8.6
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-11-29T06:03Z
EPSS history
Timeline
  • 29 NOV 06:03Z
    Billion Electric router - Missing Authentication
    cvelistv5