CVE-2024-28639: Buffer Overflow

Published Mar 16, 2024

Updated

Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of service (DoS) via the IP field.

Affected Software

4 affected components

All of the following

TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102

TOTOLINK X5000R

All of the following

TOTOLINK A7000R firmware=9.1.0u.6115_b20201022

TOTOLINK A7000R

Event History

Mar 16, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Mar 31, 58713

Event

via FIRST·07:51 PM

Frequently Asked Questions

What is the severity of CVE-2024-28639?

CVE-2024-28639 is classified as a high severity vulnerability due to its potential to allow remote code execution and denial of service.

How do I fix CVE-2024-28639?

To fix CVE-2024-28639, update the firmware of your TOTOLINK X5000R and A7000R devices to the latest versions.

Which devices are affected by CVE-2024-28639?

CVE-2024-28639 affects the TOTOLINK X5000R firmware version 9.1.0u.6118-B20201102 and A7000R firmware version 9.1.0u.6115-B20201022.

What can attackers achieve with CVE-2024-28639?

Attackers can exploit CVE-2024-28639 to execute arbitrary code on affected devices and potentially cause a denial of service.

Is CVE-2024-28639 patched in later firmware versions?

Yes, later firmware versions released after 9.1.0u.6118-B20201102 and 9.1.0u.6115-B20201022 should contain patches for CVE-2024-28639.