PT-2025-17902 · Lighttpd+1 · Lighttpd+1

Quentin Kaiser · Published 2025-04-25 · Updated 2025-05-20 · CVE-2024-6198

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions Viasat modems (affected versions not specified)

Description The device exposes a web interface on ports TCP/3030 and TCP/9882, running lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem. The vulnerability can lead to remote code execution and denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-6198

Affected Products

Viasat Modems

Lighttpd

References · 24

• https://nvd.nist.gov/vuln/detail/CVE-2024-6198 · Security Note
• https://twitter.com/fletch_ai/status/1917111656972489155 · Twitter Post
• https://twitter.com/CCBalert/status/1916874003911676403 · Twitter Post
• https://t.me/cvedetector/23757 · Telegram Post
• https://t.me/zerodayalert/489 · Telegram Post
• https://twitter.com/_zeus_dev_/status/1917126175765500412 · Twitter Post
• https://twitter.com/onekey_rl/status/1915755492971843858 · Twitter Post
• https://twitter.com/onekey_sec/status/1923046201756131706 · Twitter Post
• https://twitter.com/Dinosn/status/1915880820663062745 · Twitter Post
• https://t.me/defcon_news/129856 · Telegram Post
• https://twitter.com/CVEnew/status/1915762299383488637 · Twitter Post
• https://twitter.com/onekey_rl/status/1915755508427837767 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1k9rx34/top_10_trending_cves_28042025 · Reddit Post
• https://onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6198 · Note
• https://t.me/rnetsec/21505 · Telegram Post