CVE-2024-39359

Summary

CVE-2024-39359 is a buffer overflow vulnerability affecting the Wireless.cgi DeleteMac() function in Wavlink AC3000 M33A8 V5030.210505. This issue arises when the function fails to validate input, allowing a maliciously crafted HTTP request to overwrite memory beyond the intended buffer. Consequentially, an attacker can manipulate the system and execute arbitrary commands with elevated privileges, posing a significant security risk. The vulnerability is authenticated, meaning an attacker must have valid access to the affected system to exploit it.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.