CVE-2024-7490: Remote Code Execution in Advanced Software Framework DHCP server
Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwipdhcpfindoption.
This issue affects Advanced Software Framework: through 3.52.0.2574.
ASF is no longer being supported. Apply provided workaround or migrate to an actively maintained framework.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7490?
CVE-2024-7490 is classified as a high severity vulnerability due to the potential for remote code execution.
How does CVE-2024-7490 occur?
CVE-2024-7490 occurs due to improper input validation in the DHCP server that can lead to a buffer overflow.
What affected software versions are impacted by CVE-2024-7490?
CVE-2024-7490 affects the Microchip Advanced Software Framework versions up to and including 3.52.0.2574.
How can I fix CVE-2024-7490?
The recommended fix for CVE-2024-7490 is to update the Microchip Advanced Software Framework to a version that addresses this vulnerability.
What is the impact of exploitating CVE-2024-7490?
Exploitation of CVE-2024-7490 can allow an attacker to execute arbitrary code on the affected system.