CVE-2024-52014

Summary

CVE-2024-52014 is a newly discovered vulnerability affecting multiple Netgear routers, including the R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128. This issue stems from a stack overflow in genie_pptp.cgi, which can be triggered via a maliciously crafted POST request, leading to a Denial of Service (DoS) condition. Attackers can exploit this vulnerability to cause the routers to crash, rendering them unavailable for use. The affected devices should be updated as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.