CVE-2024-57543

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 120

Summary

CVE-2024-57543 is a newly discovered buffer overflow vulnerability affecting the Linksys E8450 v1.2.00.360516 firmware. The issue lies in the handling of the dhcpstart_ip field during parsing, which is copied to the stack without proper length verification, allowing an attacker to inject malicious data and potentially execute arbitrary code. This vulnerability could lead to serious security implications, including unauthorized access or system crashes. It is recommended that users update their firmware to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share