CVE-2024-4641CWE-134

OnCell G3470A-LTE Series: Authenticated Format String Errors

Medium · published June 25, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2024-06-25T09:23Z
EPSS history
Timeline
  • 25 JUN 09:23Z
    OnCell G3470A-LTE Series: Authenticated Format String Errors
    cvelistv5