CVE-2024-54809

syedaquib77

Vulnerability Alert: 8 Zero-Day Vulnerabilities in Netgear WNR854T Router Timeline: Disclosure: 2025-03-31, Patch: TBD exploitMaturity: Proof-of-Concept affectedVersions: Netgear WNR854T fixedVersions: Summary: CVE-2024-54802: Vulnerable to stack-based buffer overflow in UPNP service. CVE-2024-54803: Command injection via nvram parameter pppoe_peer_mac. CVE-2024-54804: Command injection via wan_hostname. CVE-2024-54805: Command injection via get_email. CVE-2024-54806: Arbitrary command execution via cmd.cgi. CVE-2024-54807: Command injection in addmap_exec of UPNP service. CVE-2024-54808: Exploit allowing arbitrary code execution through SetDefaultConnectionService function. CVE-2024-54809: Buffer overflow vulnerability in parse_st_header function that triggers arbitrary command execution. Description: Eight zero-day vulnerabilities were discovered in the Netgear WNR854T router, including buffer overflows and command injection flaws. These vulnerabilities can allow attackers to gain control of affected devices, execute arbitrary system commands with root privileges, and persist malicious activities across reboots. Recommended Actions: - Users should update their devices as soon as a patch is available, or consider replacing vulnerable hardware. Related Resources: - https://t.co/v3YztpqUJW - https://t.co/BlSUVBhZrK - https://t.co/gilzpMXfPf Tags: #Netgear #Router #Zero-Day #BufferOverflow #CommandInjection #UPnP #CVE #Cybersecurity