Secuno
ENNL
Book demo

CVE-2024-33377

Lb-link Bl-w1210m Firmware vulnerability

8.1 HIGHPublic exploitEPSS 0.44%
  1. Published14 Jun 2024

Description

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionRequired
ScopeUnchanged
ConfidentialityNone
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Affected products

Lb-link Bl-w1210m Firmwareall versions

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-843889.6
A improper restriction of rendered ui layers or frames vulnerability in Fortinet…
CVE-2026-879958.7
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.…
CVE-2026-749788.1
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox…
CVE-2026-704868.2
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.…
CVE-2026-585958.1
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS…
CVE-2026-00078.6
In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into…

Frequently asked

Is CVE-2024-33377 being actively exploited?

CVE-2024-33377 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.44%.

How severe is CVE-2024-33377?

CVE-2024-33377 has a CVSS 3.1 base score of 8.1, rated high. EPSS estimates a 0.44% probability of exploitation.

Which products are affected by CVE-2024-33377?

Affected products include Lb-link Bl-w1210m Firmware.

How do I fix CVE-2024-33377?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-33377 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.