Security Advisory

CVE-2024-6198

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-25 13:02:43

Last updated 2026-02-26 18:28:04

Assigner ONEKEY

State PUBLISHED

Description

The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.

← Browse all CVEs View on cve.org ↗