Buffer overflow in Viasat Eg1000
CVE-2024-6199
An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem. Customers that have not enabled Dynamic DNS on their modem are not vulnerable.
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (9.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 9th percentile — 9.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Viasat Eg1000 — versions 0
- Viasat Eg1020 — versions 0
- Viasat Rg1100 — versions 0
- Viasat Rm5110 — versions 0
- Viasat Rm5111 — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6199 (technical-description, third-party-advisory)
Frequently asked questions
- What is CVE-2024-6199?
- CVE-2024-6199 is a vulnerability in Viasat Eg1000, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). Published 2025-04-25.
- Is CVE-2024-6199 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.