CVE-2024-40090
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability in Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier allows remote information disclosure. An unauthenticated attacker can send a GET request to the index page, leaking memory addresses of uClibc and the stack.
Risk Assessment
The risk is that an attacker can use the leaked memory addresses to perform further attacks, such as taking control of the device or escalating privileges within the network.
Recommendation
It is recommended to immediately update the firmware of the Vilo 5 Mesh WiFi System to a version later than 5.16.1.33, which includes a fix for this vulnerability.
Other vulnerabilities in Vilo 5 Mesh WiFi System
See all- CVE-2024-40089Critical
A command injection vulnerability in Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier allows remote, authenticated attackers to execute arbitrary code by injecting shell commands into the device name.
- CVE-2024-40087Critical
Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier suffers from insecure permissions. Lack of authentication in the custom TCP service on port 5432 allows remote, unauthenticated attackers to gain administrative access to the router.
- CVE-2024-40086Critical
A buffer overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier allows remote, unauthenticated attackers to execute arbitrary code by sending a password longer than 64 bytes.
- CVE-2024-40085Critical
A buffer overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi System versions up to 5.16.1.33 allows remote, unauthenticated attackers to execute arbitrary code by sending pppoe_username and pppoe_password fields longer than 128 bytes.
- CVE-2024-40083Critical
A buffer overflow vulnerability in the local_app_set_router_token function of Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier. A remote, unauthenticated attacker can execute arbitrary code by reading the token and timezone JSON fields via sscanf into a fixed-length buffer.
- CVE-2024-40091Medium
Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier lacks authentication in the Boa webserver, allowing remote, unauthenticated attackers to retrieve logs containing sensitive system information.
Original NVD description (English source)
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver allows remote, unauthenticated attackers to leak memory addresses of uClibc and the stack via sending a GET request to the index page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS