CVE-2024-52023

CVSS 3.1 Score 5.7 of 10 (medium)

Details

Published Nov 5, 2024
CWE ID 120

Summary

CVE-2024-52023 is a recently disclosed vulnerability affecting Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 routers. The issue lies in the pppoe2.cgi file, where a stack overflow can be triggered through a maliciously crafted POST request containing a manipulated pppoe_localip parameter. This vulnerability results in a Denial of Service (DoS) condition, allowing attackers to disrupt the targeted network.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share