CVE-2024-6199

Severity CVSS v4.0:

HIGH

Type:

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Publication date:

25/04/2025

Last modified:

29/04/2025

Description

An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem.<br /> <br /> Customers that have not enabled Dynamic DNS on their modem are not vulnerable.

Impact

Vector 4.0

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Red CVSS v4.0 Severity and Metrics:

Base Score: 7.70 HIGH
Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Red

Attack Vector (AV): Adjacent
Attack Complexity (AC): High
Attack Requirements (AT): Present
Privileges Required (PR): None
User Interaction (UI): None
Confidentiality (VC): High
Integrity (VI): High
Availability (VA): High
Confidentiality (SC): None
Integrity (SI): None
Availability (SA): None
Safety (S): Negligible
Automatable (AU): No
Recovery (R): User
Value Density (V): Diffuse
Vulnerability Response Effort (RE): Moderate
Provider Urgency (U): Red

Base Score 4.0

7.70

Severity 4.0

HIGH

References to Advisories, Solutions, and Tools

https://www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6199