CVE-2024-28639
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 16, 2024
Updated: Dec 16, 2024
CWE ID 120
Summary
CVE-2024-28639 is a newly identified vulnerability that affects the TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 firmware. This buffer overflow issue permits remote attackers to execute malicious code and cause a denial of service (DoS) through manipulation of the IP field. Successful exploitation could lead to unauthorized access, data theft, or system crashes, making it a significant security risk. Users are recommended to update their firmware to the latest versions as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- TOTOLINK