CVE-2024-7490

Summary

CVE-2024-7490 is an Input Validation vulnerability affecting Microchip Technology's Advanced Software Framework DHCP server. The flaw, located in the tinydhcpserver.C file and the lwip_dhcp_find_option routine, can lead to remote code execution through a buffer overflow. This vulnerability impacts Advanced Software Framework versions up to and including 3.52.0.2574. However, as ASF is no longer being supported, affected users are advised to implement the suggested workaround or transition to a more actively maintained framework to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.