CVE Catalog
CVE-2024-37816
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Quectel EC25-EUX module (version EC25EUXGAR08A05M1G). This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Risk Assessment
The risk includes potential takeover of the IoT device or modem, leading to data integrity compromise, service disruption, or use as an entry point into the network.
Recommendation
Immediately update the firmware of the Quectel EC25-EUX module to the latest version provided by the manufacturer and monitor security advisories.
Original NVD description (English source)
Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.