by Kastro
Paper/Archive/CVE-2024-39791

CVE-2024-39791

Vonets VAR1200-H — Vonets WiFi Bridges Stack-based Buffer Overflow

EPSS 1%CVSS 10.0
critical.is priorityof 100
43
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 66.0.660 × 2013.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code.

Affected

ProductAffectedFixed inSource
VAR1200-H≤ 3.3.23.6.9–CNA
VAR1200-L≤ 3.3.23.6.9–CNA
VAR600-H≤ 3.3.23.6.9–CNA
VAP11AC≤ 3.3.23.6.9–CNA
VAP11G-500S≤ 3.3.23.6.9–CNA
VBG1200≤ 3.3.23.6.9–CNA
VAP11S-5G≤ 3.3.23.6.9–CNA
VAP11S≤ 3.3.23.6.9–CNA
VAR11N-300≤ 3.3.23.6.9–CNA
VAP11G-300≤ 3.3.23.6.9–CNA
VAP11N-300≤ 3.3.23.6.9–CNA
VAP11G≤ 3.3.23.6.9–CNA

Scores by source

icscert (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
icscert (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-24-214-08