CVE-2024-37357
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 120
Summary
CVE-2024-37357 is a recently disclosed buffer overflow vulnerability that impacts the set_TR069() functionality in the adm.cgi component of Wavlink AC3000 M33A8.V5030.210505. Maliciously crafted HTTP requests can exploit this issue, resulting in a stack-based buffer overflow. An attacker, once authenticated, can potentially execute arbitrary code, leading to significant security risks for affected systems. It is crucial for users to apply the necessary patches or upgrades to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.