Buffer Overflow Vulnerability in RT-Thread Wlan_Mgmt Drivers
CVE-2024-25388

8.4HIGH

Key Information:

Vendor

RT-Thread

Status
Rt-thread
Vendor
CVE Published:
27 March 2024

What is CVE-2024-25388?

The vulnerability in RT-Thread version 5.0.2 stems from an integer signedness error in the wlan_mgmt component, allowing for a potential buffer overflow. This flaw could be exploited to disrupt system functionality or execute arbitrary code, highlighting the importance of addressing such vulnerabilities in embedded systems.

References

https://github.com/RT-Thread/rt-thread/issues/8285
https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05...
https://security.humanativaspa.it/multiple-vulnerabilitie...

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.