CVE-2024-33073

Summary

CVE-2024-33073 is a newly identified vulnerability that affects the parsing of certain fields within the Multicast Listener Discovery (MLD) Information Element (IE). Specifically, the BSS parameter change count and MLD capabilities fields are at risk. An attacker who successfully exploits this vulnerability can gain unintended access to sensitive information, resulting in an information disclosure. This issue may pose a significant threat to networks that utilize multicast communication and should be addressed promptly through appropriate patches or mitigations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.