CVE-2024-42520

Summary

CVE-2024-42520 is a newly identified buffer overflow vulnerability affecting the TOTOLINK A3002R v4.0.0-B20230531.1404 firmware. The issue resides in the /bin/boa component and can be exploited via formParentControl. When a user submits specially crafted data through this form, it may result in an overflow condition, enabling an attacker to execute arbitrary code on the system or cause it to crash. This vulnerability poses a significant risk if not addressed promptly, as it can lead to unauthorized access, data theft, or other malicious activities. Users are advised to update their firmware as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.