CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC 本文書では、NEXTU FLATA AX1500 ルーターファームウェアにおいて CVE-2024-29671 の脆弱性がどのように悪用されたかを説明します。 実行環境 このルーターは、Realtekチップセットを採用したMIPSアーキテクチャ（リトルエンディアン）に基づいています。 対象ルーターのファームウェアバージョンは v1.0.2 です。 このファームウェアには、2005年に最後にリリースされた組み込みWebサーバーである "boa" が含まれています。 ただし、このルーターは boa...

CVE-2024-29671

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...

NEXTU FLATA AX1500 安全漏洞

NEXTU FLATA AX1500 is a wireless router from NEXTU. A security vulnerability exists in the NEXTU FLATA AX1500 v1.0.3, which originates from a stack overflow in the url parameter in /boafrm/formFilter, which could lead to a denial of service attack...

NEXTU FLATA AX1500 安全漏洞

NEXTU FLATA AX1500 is a wireless router from NEXTU. A security vulnerability exists in the NEXTU FLATA AX1500 WIFI6 v1.0.3. An attacker exploiting this vulnerability could trigger a denial of service DoS or potentially arbitrary code execution via a specially crafted POST request...

CVE-2024-29671

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...

CVE-2024-29671

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...

CVE-2024-29671

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...

NEXTU FLATA AX1500 安全漏洞

The NEXTU FLATA AX1500 is a wireless router from NEXTU. A security vulnerability exists in the NEXTU FLATA AX1500 version v.1.0.2, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code via the POST request handler component...

CVE-2024-29671

The NEXTU FLATA AX1500 Router (firmware v1.0.2 ) is vulnerable to a buffer overflow in its embedded boa web server. The root cause is a missing length check when copying the hostname parameter using strcpy() in the formStaticDHCP function (at address 0x00411c00 ). A remote attacker can exploit th...

CVE-2024-29671: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...