Home

Description

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog.

PUBLISHED Reserved 2025-01-16 | Published 2025-07-08 | Updated 2025-07-08 | Assigner CERTVDE




MEDIUM: 5.2CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Problem types

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Product status

Default status
unaffected

0.0.0 (semver)
affected

Default status
unaffected

0.0.0 (semver)
affected

Default status
unaffected

0.0.0 (semver)
affected

Default status
unaffected

0.0.0 (semver)
affected

Credits

Jesson Soto Ventura finder

Matthew Waddell finder

References

certvde.com/de/advisories/VDE-2025-014

cve.org (CVE-2025-24004)

nvd.nist.gov (CVE-2025-24004)

Download JSON