CVE-2024-39358
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 120
Summary
CVE-2024-39358 is a buffer overflow vulnerability affecting the set_wzap() functionality in the adm.cgi of Wavlink AC3000 M33A8 V5030.210505. A maliciously crafted HTTP request can exploit this issue, leading to stack-based buffer overflow. Authenticated attackers can potentially manipulate the request to trigger this vulnerability and gain unintended control over the system. This flaw poses a significant risk and requires immediate remediation to prevent potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.