What is CVE-2024-6199?

CVE-2024-6199 is a vulnerability in Viasat Eg1000, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). Published 2025-04-25.

Is CVE-2024-6199 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Viasat Eg1000

CVE-2024-6199

An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem are not vulnerable.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (9.7th percentile) — read the EPSS interpretation.

Affected products

Viasat Eg1000 — versions 0
Viasat Eg1020 — versions 0
Viasat Rg1100 — versions 0
Viasat Rm5110 — versions 0
Viasat Rm5111 — versions 0

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

Public proof-of-concept exploits

References

research@onekey.com (technical-description, third-party-advisory)

Frequently asked questions

What is CVE-2024-6199?: CVE-2024-6199 is a vulnerability in Viasat Eg1000, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). Published 2025-04-25.
Is CVE-2024-6199 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.