← Database

CVE-2024-40091

MEDIUM CVSS: 5.3 Published: 2024-10-21 Modified: 2026-07-05

Description

Vilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve logs with sensitive system.

Affected Platforms

Viloliving Vilo 5 FirmwareViloliving Vilo 5

Weakness Type

CWE-306

References