CVE-2024-57544
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 120
Summary
CVE-2024-57544 is a newly disclosed buffer overflow vulnerability affecting Linksys E8450 v1.2.00.360516. The issue lies in the lack of length verification when copying the lan_ipaddr field to the stack, which can result in an attacker supplying excess data to trigger the buffer overflow and potentially execute arbitrary code. This vulnerability poses a significant risk to network security and requires users to update their firmware as soon as a patch is available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linksys E8450
Affected Vendors
- Linksys