CVE-2024-50996

CVSS 3.1 Score 5.7 of 10 (medium)

Details

Published Nov 5, 2024
CWE ID 120

Summary

CVE-2024-50996 is a newly discovered stack overflow vulnerability affecting several Netgear routers, including the R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128. By crafting a malicious POST request with a specially crafted bpa_server parameter, attackers can trigger a stack overflow, leading to a Denial of Service (DoS) condition. This vulnerability poses a significant risk to network availability and requires affected routers to be updated as soon as possible to mitigate the threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share