CVE-2024-39801
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 120
Summary
CVE-2024-39801 refers to multiple buffer overflow vulnerabilities identified in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A maliciously crafted HTTP request can exploit these vulnerabilities, leading to stack-based buffer overflows. Specifically, the `qos_bandwidth` POST parameter contains a buffer overflow issue that an authenticated attacker can exploit to execute arbitrary code or cause a denial-of-service condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.