CVE-2024-39768

creationtimestamp| type| source ---|---|--- 2025-01-14 15:17:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkcgl3qt2f 2025-01-14 15:49:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827498492271582...

CVE-2024-39768

Multiple buffer overflow vulnerabilities exist in the internet.cgi setqos functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This...

CVE-2024-39768

CVE-2024-39768 affects the Wavlink AC3000 router (M33A8.V5030.210505) via the internet.cgi set_qos() function. The vulnerability is a stack-based buffer overflow in the POST parameter cli_name , where unbounded strcat writes into a 0x400-byte stack buffer. An authenticated HTTP request can trigge...