Buffer Overflow Vulnerability in EMQX Neuron Plugin Functionality

CVE-2024-10964

Summary

A severe vulnerability has been identified in EMQX Neuron, specifically in the function handle_add_plugin found in cmd.library of the plugins/restful/plugin_handle.c file. This defect allows for a buffer overflow, which can be exploited by a remote attacker. If successfully executed, the vulnerability can lead to unauthorized access and control over the affected system. EMQX has acknowledged this issue and recommends affected users to apply the available patch to mitigate the risks associated with this critical flaw.

References