CVE-2024-36493
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 121
Summary
CVE-2024-36493 is a buffer overflow vulnerability affecting the set_wifi_basic() functionality in the wireless.cgi of Wavlink AC3000 M33A8 devices running version V5030.210505. This issue arises due to a stack-based buffer overflow, which can be triggered by a maliciously crafted HTTP request. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands on the affected device, making it a significant security risk. Authenticated access is required to exploit this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.