Description
The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker
with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ViaSat | RM4100 | < 3.8.0.4 | 3.8.0.4 |
| Viasat | RM4200 | < 3.8.0.4 | 3.8.0.4 |
| Viasat | EM4100 | < 3.8.0.4 | 3.8.0.4 |
| Viasat | RM5110 | ≤ 4.3.0.1 | — |
| Viasat | RM5111 | ≤ 4.3.0.1 | — |
| Viasat | RG1000 | ≤ 4.3.0.1 | — |
| Viasat | RG1100 | ≤ 4.3.0.1 | — |
| Viasat | EG1000 | ≤ 4.3.0.1 | — |
| Viasat | EG1020 | ≤ 4.3.0.1 | — |
References
- https://www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6198 third-party-advisory technical-description