CVE-2024-39791
10.0 criticalEPSS 1.1%
Critical (10.0) in vonets. EPSS 1.1% chance of exploitation in the next 30 days.
Stack-based buffer overflow vulnerabilities affecting Vonets
industrial wifi bridge relays and wifi bridge repeaters, software versions
3.3.23.6.9 and prior, enable an unauthenticated remote attacker to
execute arbitrary code.
Severity
CVSS 4.0
10.0 criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HCVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-121
- Published
- Modified
- Record from
- the NVD, synced
Affected
- vonets:vap11ac_firmware
- vonets:vap11g-300_firmware
- vonets:vap11g-500_firmware
- vonets:vap11g-500s_firmware
- vonets:vap11g_firmware
- vonets:vap11n-300_firmware
- vonets:vap11s-5g_firmware
- vonets:vap11s_firmware
- vonets:var11n-300_firmware
- vonets:var1200-h_firmware
- vonets:var1200-l_firmware
- vonets:var600-h_firmware
- vonets:vbg1200_firmware
- vonets:vga-1000_firmware
References
Check your stackJSON