CVE-2024-33375

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:lb-link:bl-w1210m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lb-link:bl-w1210m:2.0:*:*:*:*:*:*:*

History

30 May 2025, 14:09

Type Values Removed Values Added
CPE cpe:2.3:o:lb-link:bl-w1210m_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lb-link:bl-w1210m:2.0:*:*:*:*:*:*:*
First Time Lb-link
Lb-link bl-w1210m Firmware
Lb-link bl-w1210m
References () https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Credentials-Stored-in-Cleartext--%7C--Unencrypted-Credentials-%28CVE%E2%80%902024%E2%80%9033375%29 - () https://github.com/ShravanSinghRathore/Security-Advisory-Multiple-Vulnerabilities-in-LB-link-BL-W1210M-Router/wiki/Credentials-Stored-in-Cleartext--%7C--Unencrypted-Credentials-%28CVE%E2%80%902024%E2%80%9033375%29 - Broken Link
References () https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ - () https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-lb-link-bl-w1210m-router/ - Exploit, Third Party Advisory

13 Mar 2025, 14:15

Type Values Removed Values Added
CWE CWE-256

Information

Published : 2024-06-14 15:15

Updated : 2025-05-30 14:09


NVD link : CVE-2024-33375

Mitre link : CVE-2024-33375

CVE.ORG link : CVE-2024-33375


JSON object : View

Products Affected

lb-link

  • bl-w1210m
  • bl-w1210m_firmware
CWE
CWE-256

Plaintext Storage of a Password