CVE-2024-6198
SNORE Interface Unauthenticated Remote Code Execution
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SNORE Interface Unauthenticated Remote Code Execution
The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.
Reserved 2024-06-20 | Published 2025-04-25 | Updated 2025-05-08 | Assigner ONEKEYCWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
| 2024-05-13: | Initial coordinated vulnerability disclosure request |
| 2024-05-28: | Report sent to ViaSat |
| 2024-06-19: | Call between ViaSat and ONEKEY for vulnerability assessment |
| 2025-04-25: | Coordinated disclosure by ONEKEY and Viasat |
Quentin Kaiser from ONEKEY Research Labs
www.onekey.com/...dvisory-rce-on-viasat-modems-cve-2024-6198
Support options
