CVE-2024-33375

CRITICAL

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.

Affects 2 products across 1 vendor.

BCS6.6
CVSS 3.19.8
EPSS0.6%
Percentile47th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-256: CWE-256
◆ SAGE Intelligence — CITED Relevance Research Team

The LB-LINK BL-W1210M v2.0 router stores user credentials in plaintext within its firmware, posing a significant security risk.

BSID: BS-2024-GLOBAL-192792-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-33375?
The LB-LINK BL-W1210M v2.0 router stores user credentials in plaintext within its firmware, posing a significant security risk.
What is the CVSS score for CVE-2024-33375?
CVE-2024-33375 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.6%.
Is CVE-2024-33375 actively exploited?
No confirmed active exploitation of CVE-2024-33375 as of 2026-05-30.
How do I remediate CVE-2024-33375?
Priority: IMMEDIATE.
What systems are affected by CVE-2024-33375?
CVE-2024-33375 affects: Lb-Link, Lb-Link.
Vulnerability Details
CVE IDCVE-2024-33375
BSIDBS-2024-GLOBAL-192792-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2024-06-14
Last Modified2025-05-30
ICS Relevance10%
Weakness (CWE)
CWE-256
SourceNVD
Official Description

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker with physical access to the router or the ability to extract the firmware can easily retrieve user credentials due to their plaintext storage.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductFixed Version
Lb-Link Bl-W1210M Firmware —
Lb-Link Bl-W1210M —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: September 2026 | Threat Age: 809 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash8d17adbbeb1a5cdd33b058a3db0003febec98f313dfc88e63811da396178cde91e507ab2e0ec63c6b07303bf353f70ee646421545a7d67434bf0158e8ceb5d31
Related CVEs affecting Lb-Link
CVE-2023-26801 9.8 LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5... CVE-2025-1609 9.8 A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified ... CVE-2024-51431 9.8 LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/sha... CVE-2025-1608 9.8 A vulnerability, which was classified as critical, was found in LB-LINK AC190... CVE-2025-1610 9.8 A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as cr...
View all Lb-Link CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →