CVE-2024-37816: n/a
Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.
AI Analysis
Technical Summary
CVE-2024-37816 describes a stack overflow vulnerability in the Quectel EC25-EUX EC25EUXGAR08A05M1G module. The vulnerability is classified under CWE-120 and has a CVSS 3.1 score of 4.2, reflecting a medium severity level. The attack vector is local, requiring low complexity and high privileges, with no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. The affected product is delivered as a cloud service, and the vendor manages remediation. A patch is available, though specific patch details or links are not provided. No known exploits have been reported.
Potential Impact
The vulnerability could allow a local attacker with high privileges to cause a stack overflow, potentially leading to limited confidentiality, integrity, and availability impacts. However, exploitation requires local access and high privileges, reducing the overall risk. No known active exploitation has been reported.
Mitigation Recommendations
A patch is available for this vulnerability. Since the affected product is a cloud service, the vendor manages remediation server-side. Users should consult the vendor advisory for confirmation and ensure their service is updated accordingly. No additional mitigation actions are indicated at this time.
CVE-2024-37816: n/a
Description
Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.
CVSS v3.1
Score 4.2medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-37816 describes a stack overflow vulnerability in the Quectel EC25-EUX EC25EUXGAR08A05M1G module. The vulnerability is classified under CWE-120 and has a CVSS 3.1 score of 4.2, reflecting a medium severity level. The attack vector is local, requiring low complexity and high privileges, with no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. The affected product is delivered as a cloud service, and the vendor manages remediation. A patch is available, though specific patch details or links are not provided. No known exploits have been reported.
Potential Impact
The vulnerability could allow a local attacker with high privileges to cause a stack overflow, potentially leading to limited confidentiality, integrity, and availability impacts. However, exploitation requires local access and high privileges, reducing the overall risk. No known active exploitation has been reported.
Mitigation Recommendations
A patch is available for this vulnerability. Since the affected product is a cloud service, the vendor manages remediation server-side. Users should consult the vendor advisory for confirmation and ensure their service is updated accordingly. No additional mitigation actions are indicated at this time.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- mitre
- Date Reserved
- 2024-06-10T00:00:00.000Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Is Cloud Service
- true
Threat ID: 699f6c70b7ef31ef0b564097
Added to database: 02/25/2026, 21:41:04 UTC
Last enriched: 07/05/2026, 21:51:50 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 92
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.