CVE-2024-39770: Buffer Overflow
Multiple buffer overflow vulnerabilities exist in the internet.cgi setqos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in the enenable POST parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39770?
CVE-2024-39770 is classified with a critical severity level due to its potential for stack-based buffer overflow attacks.
How do I fix CVE-2024-39770?
To fix CVE-2024-39770, update your Wavlink AC3000 M33A8 device to the latest firmware version that addresses this vulnerability.
What impact does CVE-2024-39770 have on my device?
CVE-2024-39770 can allow an attacker to execute arbitrary code on an affected device through specially crafted HTTP requests.
How can attackers exploit CVE-2024-39770?
Attackers can exploit CVE-2024-39770 by sending authenticated HTTP requests that trigger the buffer overflow vulnerabilities.
What versions of the Wavlink AC3000 M33A8 are affected by CVE-2024-39770?
CVE-2024-39770 affects Wavlink AC3000 M33A8 running firmware version V5030.210505 and earlier.