by Kastro
Paper/Archive/CVE-2024-23978

CVE-2024-23978

KDDI CORPORATION HOME SPOT CUBE2 — Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.2.512 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported.

Affected

ProductAffectedFixed inSource
HOME SPOT CUBE2V102 and earlier–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refau.com/support/service/mobile/guide/wlan/home_spot_cube_2refjvn.jp/en/vu/JVNVU93740658