CVE-2024-23978

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported.

Score

CVSS 3.1 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2024-02-02

Last modified

2025-05-15

Weaknesses

CWE-122, CWE-787

Affected products

• Home Spot Cube 2 Firmware (Kddi)
• Home Spot Cube2 (Kddi Corporation)

References

• https://jvn.jp/en/vu/JVNVU93740658/
• https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/