CVE-2024-51138

Summary

CVE-2024-51138: A stack-based buffer overflow vulnerability has been discovered in the TR069 STUN servers of various Vigor models, including Vigor165/166, Vigor2620/LTE200, Vigor2860/2925, Vigor2862/2926, Vigor2133/2762/2832, Vigor2135/2765/2766, Vigor2865/2866/2927, Vigor2962, Vigor3912, and Vigor3910. This issue stems from insufficient bounds checking in the URL parsing functionality, enabling attackers to send maliciously crafted requests and trigger a buffer overflow. The exploitation results in arbitrary code execution with elevated privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.