Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Vilo 5 Mesh WiFi System Exposes Sensitive Memory to Hackers

CVE-2024-40090 · published 2 years ago
Summary

The Vilo 5 Mesh WiFi System has a security issue that allows hackers to potentially access sensitive information. This is because the system's web server doesn't properly protect its memory. To fix this, update your Vilo 5 Mesh WiFi System to the latest version, 5.16.1.34 or later.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
viloliving vilo_5_firmware <= 5.16.1.33
cpe:2.3:o:viloliving:vilo_5_firmware:*:*:*:*:*:*:*:*
Original advisory text
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver allows remote, unauthenticated attackers to leak memory addresses of uClibc an...
Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver allows remote, unauthenticated attackers to leak memory addresses of uClibc and the stack via sending a GET request to the index page.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-319Cleartext Transmission of Sensitive Information
Timeline
Published21 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-40090 · NVD
CVE-2024-40090 · MITRE
Track software like this
Free during beta