CVE-2024-45558
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 6, 2025
Updated: Jan 13, 2025
CWE ID 125
CWE ID 126
Summary
CVE-2024-45558 is a transient Denial of Service (DoS) vulnerability affecting certain network drivers. The issue arises when the driver fails to check the length of the IE (Information Element) before attempting to access the EXTN (Extensible) element ID within the per-STA (per-Station) profile. This flaw allows an attacker to craft malicious packets that trigger the vulnerability, causing the driver to crash or consume excessive system resources, leading to a DoS condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.