CVE-2024-40085

Description

A Buffer Overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code via pppoe_username and pppoe_password fields being larger than 128 bytes in length.

Reserved 2024-07-05 | Published 2024-10-21 | Updated 2024-10-22 | Assigner mitre

References

vilo.com

github.com/...esearch/vilo/blob/main/vulns/CVE-2024-40085.md

cve.org (CVE-2024-40085)

nvd.nist.gov (CVE-2024-40085)

Download JSON