Buffer Overflow Vulnerability in Netgear Routers

CVE-2024-12988

Summary

A vulnerability identified in Netgear R6900P and R7000P affects the HTTP Header Handler component, specifically within the function responsible for processing the Host argument. Malicious exploitation of this vulnerability can lead to a buffer overflow, potentially enabling attackers to execute arbitrary code remotely. The vulnerability has been publicly disclosed, creating a heightened risk for users and necessitating prompt remedial action. Despite prior notifications, Netgear has not addressed the concerns raised regarding this critical issue.

References