CVE-2024-4641

Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior

Description: The issue is related to the use of uncontrolled format strings, which can be exploited by a remote attacker to cause a denial of service. An attacker could modify an externally controlled format string to cause a memory leak.

Recommendations: For OnCell G3470A-LTE Series firmware versions v1.7.7 and prior, consider restricting the acceptance of format strings from external sources as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.