CVE-2024-6198: SNORE Interface Unauthenticated Remote Code Execution
The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6198?
CVE-2024-6198 is considered a critical vulnerability due to the potential for remote code execution via a stack buffer overflow.
How do I fix CVE-2024-6198?
To mitigate CVE-2024-6198, update the lighttpd configuration and limit access to affected ports, or patch the software if an update is available.
Who is affected by CVE-2024-6198?
Devices running lighttpd with the SNORE interface exposed on TCP ports 3030 and 9882 are vulnerable to CVE-2024-6198.
What type of vulnerability is CVE-2024-6198?
CVE-2024-6198 is a stack buffer overflow vulnerability resulting from insecure path parsing in a web service interface.
Can CVE-2024-6198 be exploited remotely?
Yes, CVE-2024-6198 can be exploited remotely by an attacker with access to the local area network.