CVE-2024-39757

CVE-2024-39757 affects the Wavlink AC3000 (M33A8.V5030.210505). TALOS documents a stack-based buffer overflow in wireless.cgi AddMac() triggered by an unauthenticated? Actually, authenticated HTTP request to AddMac via page=AddMac allows an attacker to pass an oversized addMac value that is copie...

Wavlink AC3000 wireless.cgi AddMac() buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2043 Wavlink AC3000 wireless.cgi AddMac buffer overflow vulnerability January 14, 2025 CVE Number CVE-2024-39757 SUMMARY A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac functionality of Wavlink AC3000 M33A8.V5030.210505. A...