deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-35277
Published: 2025-01-14
Description: A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the managed devices by sending specifically crafted packets
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-135
CVE: CVE-2024-35278
Published: 2025-01-14
Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.2.4 through 7.2.0 and 7.0.0 through 7.2.8 may allow an authenticated attacker to view the SQL query being run server-side when submitting an HTTP request, via including special elements in said request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-086
CVE: CVE-2024-36504
Published: 2025-01-14
Description: An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-473
CVE: CVE-2024-36506
Published: 2025-01-14
Description: An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection.
CVSS Score: 3.7 (LOW)
CWE: CWE-940
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-078
CVE: CVE-2024-36510
Published: 2025-01-14
Description: An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-071
CVE: CVE-2024-36512
Published: 2025-01-14
Description: An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-152
CVE: CVE-2024-40587
Published: 2025-01-14
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-304
CVE: CVE-2024-45326
Published: 2025-01-14
Description: An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-285
CVE: CVE-2024-46664
Published: 2025-01-14
Description: A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-310
CVE: CVE-2024-46665
Published: 2025-01-14
Description: An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.
CVSS Score: 3.7 (LOW)
CWE: CWE-201
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-326
CVE: CVE-2024-46666
Published: 2025-01-14
Description: An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4.4 through 7.4.0, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow a remote unauthenticated attacker to prevent access to the GUI via specially crafted requests directed at specific endpoints.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-250
CVE: CVE-2024-46667
Published: 2025-01-14
Description: A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-164
CVE: CVE-2024-46668
Published: 2025-01-14
Description: An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-219
CVE: CVE-2024-46669
Published: 2025-01-14
Description: An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service.
CVSS Score: 3.5 (LOW)
CWE: CWE-190
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-267
CVE: CVE-2024-46670
Published: 2025-01-14
Description: An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-266
CVE: CVE-2024-47566
Published: 2025-01-14
Description: A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-401
CVE: CVE-2024-47571
Published: 2025-01-14
Description: An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.
CVSS Score: 8.1 (HIGH)
CWE: CWE-672
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-239
CVE: CVE-2024-47572
Published: 2025-01-14
Description: An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-1236
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-210
CVE: CVE-2024-48884
Published: 2025-01-14
Description: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-259
CVE: CVE-2024-48886
Published: 2025-01-14
Description: A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-1390
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-221
CVE: CVE-2024-48890
Published: 2025-01-14
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-415
CVE: CVE-2024-48893
Published: 2025-01-14
Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via the creation of malicious playbook.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-405
CVE: CVE-2024-50564
Published: 2025-01-14
Description: A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.
CVSS Score: 3.3 (LOW)
CWE: CWE-321, CWE-798
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-216
CVE: CVE-2024-50566
Published: 2025-01-14
Description: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1, FortiManager Cloud 7.4.0 through 7.4.4, FortiManager Cloud 7.2.2 through 7.2.7, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.1 through 7.2.8 may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-463
CVE: CVE-2024-52963
Published: 2025-01-14
Description: A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.
CVSS Score: 3.7 (LOW)
CWE: CWE-787
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-373
CVE: CVE-2024-52967
Published: 2025-01-14
Description: An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-211
CVE: CVE-2024-52969
Published: 2025-01-14
Description: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3 and below, version 6.7.9 and below, 6.7.8, version 6.6.5 and below, version 6.5.3 and below, version 6.4.4 and below Update/Create Case feature may allow an authenticated attacker to extract database information via crafted requests.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-89
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-417
CVE: CVE-2024-54021
Published: 2025-01-14
Description: An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7.4.5 may allow a remote unauthenticated attacker to bypass the file filter via crafted HTTP headers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-113
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-282
CVE: CVE-2024-55591
Published: 2025-01-14
Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-535; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-55591
CVE: CVE-2024-55593
Published: 2025-01-14
Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-465
CVE: CVE-2024-56497
Published: 2025-01-14
Description: An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0.0 and 6.4.0 through 6.4.4 allows attacker to execute unauthorized code or commands via the CLI.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-170
CVE: CVE-2024-7344
Published: 2025-01-14
Description: Howyar UEFI Application "Reloader"  (32-bit and 64-bit)  is vulnerable to execution of unsigned software in a hardcoded path.
CVSS Score: 8.2 (HIGH)
CWE: CWE-347
References: https://uefi.org/revocationlistfile; https://uefi.org/specs/UEFI/2.10/03_Boot_Manager.html; https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html
CVE: CVE-2024-21797
Published: 2025-01-14
Description: A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2028; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2028
CVE: CVE-2024-34166
Published: 2025-01-14
Description: An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2000; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2000
CVE: CVE-2024-34544
Published: 2025-01-14
Description: A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2044; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2044
CVE: CVE-2024-36258
Published: 2025-01-14
Description: A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2046; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2046
CVE: CVE-2024-36272
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2045; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2045
CVE: CVE-2024-36290
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2019; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2019
CVE: CVE-2024-36295
Published: 2025-01-14
Description: A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2047; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2047
CVE: CVE-2024-36493
Published: 2025-01-14
Description: A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2041; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2041
CVE: CVE-2024-37184
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2025; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2025
CVE: CVE-2024-37186
Published: 2025-01-14
Description: An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2032; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2032
CVE: CVE-2024-37357
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2029; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2029
CVE: CVE-2024-38666
Published: 2025-01-14
Description: An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2051; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2051
CVE: CVE-2024-39273
Published: 2025-01-14
Description: A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2037; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2037
CVE: CVE-2024-39280
Published: 2025-01-14
Description: An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-15
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2055; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2055
CVE: CVE-2024-39288
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2021; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2021
CVE: CVE-2024-39294
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2026; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2026
CVE: CVE-2024-39299
Published: 2025-01-14
Description: A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2048; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2048
CVE: CVE-2024-39357
Published: 2025-01-14
Description: A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2039; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2039