CVE-2024-12654

Summary

CVE-2024-12654 is a newly disclosed vulnerability affecting FabulaTech USB over Network 6.0.6.1. The issue lies within the 0x220408 function in the ftusbbus2.sys library of the IOCT Handler component. An attacker can manipulate this function, resulting in a null pointer dereference. This vulnerability requires local access and its exploit has been made public. Despite early disclosure to the vendor, they have not yet responded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.