CVE-2024-57725
Published: 14 February 2025
Description
An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint.
Security Summary
CVE-2024-57725 is a vulnerability in the Arcadyan Livebox Fibra PRV3399B_B_LT router that allows a remote or local attacker to modify the GPON link value without authentication. This issue is exploitable through the /firstconnection.cgi endpoint and is classified under CWE-306 (Missing Authentication for Critical Function). The CVSS v3.1 base score is 6.5, reflecting medium severity with high impact on availability.
An attacker with adjacent network access (AV:A) can exploit this vulnerability with low complexity, no privileges, and no user interaction required. Successful exploitation modifies the GPON link value, resulting in a denial-of-service condition that disrupts internet service (C:N/I:N/A:H), without affecting confidentiality or integrity.
The primary reference for this vulnerability is available at https://github.com/pointedsec/CVE-2024-57725, which provides further details discovered by pointedsec. No additional patch or mitigation advisories are specified in the available information.
Details
- CWE(s)