OpenCVE

Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service (DoS) condition. Note that the affected products are no longer supported.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Kddi	Home Spot Cube 2 Home Spot Cube 2 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:kddi:home_spot_cube_2_firmware:v102:*:*:*:*:*:*:*

cpe:2.3:h:kddi:home_spot_cube_2:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU93740658/
https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/

History

No history.

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2024-02-02T06:38:19.377Z

Updated: 2024-08-01T22:27:36.287Z

Reserved: 2024-01-25T01:46:39.865Z

Link: CVE-2024-21780

Vulnrichment

Updated: 2024-08-01T22:27:36.287Z

NVD

Status : Modified

Published: 2024-02-02T07:15:10.447

Modified: 2024-11-21T08:54:59.457

Link: CVE-2024-21780

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kddi:home_spot_cube_2_firmware:v102:*:*:*:*:*:*:*", "matchCriteriaId": "E65DAC1C-559C-4396-958C-8EC4A2552987", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kddi:home_spot_cube_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "330A6D16-3BBA-4D46-B7C1-17C08C8373D5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [{"sourceIdentifier": "vultures@jpcert.or.jp", "tags": ["unsupported-when-assigned"]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service (DoS) condition. Note that the affected products are no longer supported."}, {"lang": "es", "value": "Existe una vulnerabilidad de desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria en HOME SPOT CUBE2 V102 y versiones anteriores. Procesar un comando especialmente manipulado puede resultar en una condici\u00f3n de denegaci\u00f3n de servicio (DoS). Tenga en cuenta que los productos afectados ya no son compatibles."}], "id": "CVE-2024-21780", "lastModified": "2024-11-21T08:54:59.457", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-02-02T07:15:10.447", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU93740658/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU93740658/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}