PT-2025-17903
CVE-2024-6199
·
Published
2025-04-25
·
Updated
2025-05-15
Description by
CVSS 4.0
7.7
HighMetricsAV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Red
Name of the Vulnerable Software and Affected Versions
The product name cannot be determined.
Description
An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. This issue is only exploitable on devices with Dynamic DNS enabled. Customers that have not enabled Dynamic DNS on their modem are not vulnerable.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾