Back to Database
Status published
High
CVE-2024-11980
Billion Electric router - Missing Authentication
Vulnerability Description
Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the device.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-11980
Credits & Attribution
No credits recorded in the NVD database.
References
More from Billion Electric
View All →CVE-2025-1143
Billion Electric M120N - Use of Hard-coded Credentials
High
8.4
CVE-2024-11983
Billion Electric router - OS Command Injection
High
7.2
CVE-2024-11982
Billion Electric router - Plaintext Storage of a Password
High
7.2
CVE-2024-11981
Billion Electric router - Authentication Bypass
High
7.5
Affected Vendor
Billion Electric
View all reports →Affected Software
M100, M150, M120N, M500
Vulnerable Versions:
1.04.1.592.*, 1.04.1.613.*, 1.04.1.*
Timeline
Official Publish:
November 29th, 2024
Last Modified:
November 29th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H