CVE-2024-54808
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 17, 2025
CWE ID 121
Summary
CVE-2024-54808 is a newly identified buffer overflow vulnerability affecting the Netgear WNR854T 1.5.2 (North America) firmware. This issue resides in the SetDefaultConnectionService function, which utilizes an unchecked use of the sscanf function. An attacker can exploit this vulnerability by providing maliciously crafted input to trigger a stack-based buffer overflow, resulting in control of the program counter. Ultimately, this exploit enables arbitrary code execution, posing a significant security risk for impacted devices.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Netgear, Inc.