CVE-2024-20067CWE-787

In modem, there is a possible out of bounds write due to improper input invalidation

Critical · published June 3, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds write in the modem means an attacker can cause a remote denial of service without breaking a sweat! No user interaction needed, just a crafty approach. 🔥 Think of it like a waiter at a restaurant who doesn’t check the order before serving — they could accidentally ruin dinner by bringing out a dish that’s totally wrong, leaving everyone feeling frustrated. That’s what this vulnerability does — it can serve up a server crash without anyone ordering it! If exploited, this bug could lead to a complete server halt, causing an absolute meltdown in service. Imagine everyone trying to access their favorite online services, only to find they’re completely down. This is a critical threat that could disrupt operations and customer trust!

Put simply

Think of it like a waiter at a restaurant who doesn’t check the order before serving — they could accidentally ruin dinner by bringing out a dish that’s totally wrong, leaving everyone feeling frustrated. That’s what this vulnerability does — it can serve up a server crash without anyone ordering it! This vulnerability exists due to improper input invalidation in the modem component, allowing attackers to write data beyond allocated boundaries, leading to a denial of service without needing special privileges.

What to do

If exploited, this bug could lead to a complete server halt, causing an absolute meltdown in service. Imagine everyone trying to access their favorite online services, only to find they’re completely down. This is a critical threat that could disrupt operations and customer trust! Patch this vulnerability immediately using Patch ID MOLY01267285. Review your modem configurations to ensure that no exposed services are left vulnerable. Regularly monitor for updates and configurations to keep your network resilient. You've got this! By addressing this vulnerability, you’ll keep your systems running smoothly and protect your users. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-06-03T02:04Z
EPSS history
Timeline
  • 03 JUN 02:04Z
    In modem, there is a possible out of bounds write due to improper input invalidation
    cvelistv5