CVE-2024-39802: Buffer Overflow
Multiple buffer overflow vulnerabilities exist in the qos.cgi qossettings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A buffer overflow vulnerability exists in the qosdat POST parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39802?
CVE-2024-39802 is classified as a high severity vulnerability due to the risk of stack-based buffer overflow that could be exploited by authenticated attackers.
How do I fix CVE-2024-39802?
To fix CVE-2024-39802, update your Wavlink AC3000 M33A8 device to the latest firmware version provided by Wavlink.
What exploitation methods exist for CVE-2024-39802?
Exploitation of CVE-2024-39802 involves sending specially crafted HTTP requests to trigger buffer overflows in the qos.cgi qos_settings() functionality.
Who is affected by CVE-2024-39802?
Users of the Wavlink AC3000 M33A8 devices running the affected firmware versions are at risk from CVE-2024-39802.
Can CVE-2024-39802 occur without authentication?
No, CVE-2024-39802 requires an authenticated user to trigger the buffer overflow vulnerabilities.