cve/2024/CVE-2024-6198.md
2025-09-29 21:09:30 +02:00

1.6 KiB

CVE-2024-6198

Description

The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attackerwith access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.

POC

Reference

No PoCs from references.

Github