CVE-2024-39603

Summary

CVE-2024-39603 is a newly disclosed vulnerability affecting the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8. This issue involves a stack-based buffer overflow, which can be triggered by a specially crafted HTTP request. Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary commands with administrative privileges, making it a significant security risk. Authenticated access is required to exploit this vulnerability, increasing the importance of secure authentication practices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.