oFono 1.34 AT CMGR Command uninitialized variable

Summaryinfo

A vulnerability categorized as problematic has been discovered in oFono 1.34. This affects an unknown function of the component AT CMGR Command Handler. The manipulation results in uninitialized variable. This vulnerability is identified as CVE-2024-7542. The attack is only possible with local access. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in oFono 1.34. Affected is an unknown functionality of the component AT CMGR Command Handler. The manipulation with an unknown input leads to a uninitialized variable vulnerability. CWE is classifying the issue as CWE-457. The code uses a variable that has not been initialized, leading to unpredictable or unintended results. This is going to have an impact on confidentiality. CVE summarizes:

oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT+CMGR commands. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23309.

The advisory is available at zerodayinitiative.com. This vulnerability is traded as CVE-2024-7542 since 08/06/2024. The exploitability is told to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 307010 (Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : oFono vulnerabilities (USN-8178-1)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (307010). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• oFono

Version

• 1.34

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion