CVE-2024-6351

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 28, 2025
CWE ID 120

Summary

CVE-2024-6351 is a newly identified vulnerability affecting the NWK/APS layer of the Ember ZNet stack. A maliciously crafted packet can trigger a buffer overflow, leading to an assertion failure. This issue poses a potential risk for embedded systems utilizing this stack, potentially allowing an attacker to execute arbitrary code or cause the device to crash. The vulnerability necessitates immediate attention from affected organizations to mitigate potential threats. Further research is required to determine the extent of the impact and the most effective countermeasures.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share