← Back

CVE-2024-39791

nvd nist
Published: Aug 12, 2024Modified: Aug 20, 2024

JSON object

Loading...
10.0
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: ics-cert@hq.dhs.gov (Secondary)

Description

Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code.

Affected (14)

Vonets
14 products
Var1200 H Firmware
Var1200 L Firmware
Var600 H Firmware
Vap11ac Firmware
Vap11g 500s Firmware
Vbg1200 Firmware
Vap11s 5g Firmware
Vap11s Firmware
Var11n 300 Firmware
Vap11g 300 Firmware
Vap11n 300 Firmware
Vap11g Firmware
Vap11g 500 Firmware
Vga 1000 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Var1200 H Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Var1200 H
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Var1200 L Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Var1200 L
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Var600 H Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Var600 H
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11ac Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11ac
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11g 500s Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11g 500s
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vbg1200 Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vbg1200
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11s 5g Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11s 5g
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11s Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11s
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Var11n 300 Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Var11n 300
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11g 300 Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11g 300
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11n 300 Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11n 300
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11g Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11g
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vap11g 500 Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vap11g 500
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vga 1000 Firmware
Up to 3.3.23.6.9
Running on/withPlatform Versions
Vonets
Vga 1000
All versions

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.