VULNERABILITY INTELLIGENCE

CVE-2024-4641

CVSS score6.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-06-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references