Log in Start free

Vulnerability · Published Apr 25, 2025 · Assigned by ONEKEY

CVE-2024-6198SNORE Interface Unauthenticated Remote Code Execution

High 7.7

In plain English

A high-severity buffer overflow in EG1000 from Viasat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 4.0)7.7High
Exploit odds (30 days)0.3%top 78.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.

Affected products (as reported)

VendorProductVersions
ViaSat RM4100 0 – before 3.8.0.4
Viasat RM4200 0 – before 3.8.0.4
Viasat EM4100 0 – before 3.8.0.4
Viasat RM5110 0 – through 4.3.0.1
Viasat RM5111 0 – through 4.3.0.1
Viasat RG1000 0 – through 4.3.0.1
Viasat RG1100 0 – through 4.3.0.1
Viasat EG1000 0 – through 4.3.0.1
Viasat EG1020 0 – through 4.3.0.1

Weakness: CWE-120 · Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:M/U:Red

References