NVIDIA shader out-of-bounds and eleven Level One router vulnerabilities

Summary: Cisco Talos researchers discovered five NVIDIA out-of-bounds read vulnerabilities in shader processing that can be triggered remotely in virtualized environments via a web browser, potentially leading to disclosure of sensitive information and further memory corruption. The same team found eleven vulnerabilities of different types in the LevelOne WBR-6012 SOHO router running firmware R0.30e6, including hard-coded credentials usable during the first 30 seconds post-boot, an authentication bypass based on client IP address reliance, and a buffer overflow triggered by HTTP POST requests with URIs of 1,454 or more characters.
What's compelling: The LevelOne router's hard-coded credentials are exploitable in a 30-second window after boot, and other flaws in the same set can force a reboot - so the window can be reopened at will. Eleven distinct weaknesses in one low-cost home and small-office gateway, including an undocumented user account and a backdoor account, put the network edge of small sites in scope.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-0117 CVE-2024-0118 CVE-2024-0119 CVE-2024-0120 CVE-2024-0121 CVE-2024-23309 CVE-2024-24777 CVE-2024-28875 CVE-2024-31151 CVE-2024-31152 CVE-2024-32946 CVE-2024-33603 CVE-2024-33626 CVE-2024-33699
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026