Vulnerability · Published Aug 8, 2024 · Assigned by icscert
CVE-2024-39791Vonets WiFi Bridges Stack-based Buffer Overflow
Critical 10.0
In plain English
A critical-severity stack buffer overflow in VAP11AC from Vonets. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)1.1%top 33.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Vonets | VAR1200-H | 0 – through 3.3.23.6.9 |
| Vonets | VAR1200-L | 0 – through 3.3.23.6.9 |
| Vonets | VAR600-H | 0 – through 3.3.23.6.9 |
| Vonets | VAP11AC | 0 – through 3.3.23.6.9 |
| Vonets | VAP11G-500S | 0 – through 3.3.23.6.9 |
| Vonets | VBG1200 | 0 – through 3.3.23.6.9 |
| Vonets | VAP11S-5G | 0 – through 3.3.23.6.9 |
| Vonets | VAP11S | 0 – through 3.3.23.6.9 |
| Vonets | VAR11N-300 | 0 – through 3.3.23.6.9 |
| Vonets | VAP11G-300 | 0 – through 3.3.23.6.9 |
| Vonets | VAP11N-300 | 0 – through 3.3.23.6.9 |
| Vonets | VAP11G | 0 – through 3.3.23.6.9 |
| Vonets | VAP11G-500 | 0 – through 3.3.23.6.9 |
| Vonets | VBG1200 | 0 – through 3.3.23.6.9 |
| Vonets | VAP11AC | 0 – through 3.3.23.6.9 |
| Vonets | VGA-1000 | 0 – through 3.3.23.6.9 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H