CVE-2024-39757

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 121

Summary

CVE-2024-39757 is a stack-based buffer overflow vulnerability affecting the AddMac() functionality in the wireless.cgi of Wavlink AC3000 M33A8 (V5030.210505). A maliciously crafted HTTP request can exploit this issue, resulting in arbitrary command execution. Authenticated access is required to trigger the vulnerability, making it a significant security concern for affected systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share