CVE-2024-12147

Summary

CVE-2024-12147 is a newly disclosed critical vulnerability affecting the Netgear R6900 1.0.1.26_1.0.20. This issue lies in an unknown functionality of the file upgrade_check.cgi within the HTTP Header Handler component. An attacker can exploit this vulnerability by manipulating the Content-Length argument, leading to a buffer overflow. The exploit can be executed remotely, making this a significant threat. Unfortunately, the vulnerability has been made public, and the exploit is now available. Despite early disclosure to the vendor, they have not responded with a patch or mitigation measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.