CVE-2024-40086

CVSS 9.6 CRITICALEPSS 0.7%CWE-120

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.6EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 oct 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code via a password field larger than 64 bytes in length.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://github.com/byu-cybersecurity-research/vilo/blob/main/vulns/CVE-2024-40086.md http://vilo.com