Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-6199

Unauthenticated Remote Code Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ONEKEY

Description

An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem are not vulnerable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ViaSat RM5110

Default version status: unaffected

  • 0 to ≤ 4.3.0.2affected

ViaSat RM5111

Default version status: unaffected

  • 0 to ≤ 4.3.0.2affected

Viasat RG1100

Default version status: unaffected

  • 0 to ≤ 4.3.0.2affected

Viasat EG1000

Default version status: unaffected

  • 0 to ≤ 4.3.0.2affected

Viasat EG1020

Default version status: unaffected

  • 0 to ≤ 4.3.0.2affected

References