CVE-2024-55211

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55211
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.

8.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/micaelmaciel/CVE-2024-55211 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:think:tk-rt-wr135g_firmware:3.0.2-x000:*:*:*:*:*:*:*
cpe:2.3:h:think:tk-rt-wr135g:-:*:*:*:*:*:*:*
History

25 Apr 2025, 16:31

Type Values Removed Values Added
First Time Think tk-rt-wr135g
Think
Think tk-rt-wr135g Firmware
Summary
  • (es) Un problema en Think Router Tk-Rt-Wr135G V3.0.2-X000 permite a los atacantes eludir la autenticación a través de una cookie manipulada.
CPE cpe:2.3:o:think:tk-rt-wr135g_firmware:3.0.2-x000:*:*:*:*:*:*:*
cpe:2.3:h:think:tk-rt-wr135g:-:*:*:*:*:*:*:*
References () https://github.com/micaelmaciel/CVE-2024-55211 - () https://github.com/micaelmaciel/CVE-2024-55211 - Exploit, Third Party Advisory

17 Apr 2025, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.4
CWE CWE-565

17 Apr 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-17 18:15

Updated : 2025-04-25 16:31

NVD link : CVE-2024-55211

Mitre link : CVE-2024-55211

CVE.ORG link : CVE-2024-55211

JSON object : View

Products Affected

think

  • tk-rt-wr135g_firmware
  • tk-rt-wr135g
CWE
CWE-565

Reliance on Cookies without Validation and Integrity Checking