Buffer Overflow Vulnerabilities in Wavlink AC3000 Router

CVE-2024-39770

What is CVE-2024-39770?

Multiple buffer overflow vulnerabilities have been identified in the internet.cgi set_qos() functionality of the Wavlink AC3000 M33A8.V5030.210505 router. These vulnerabilities can be triggered through specially crafted HTTP requests targeting the en_enable POST parameter, potentially allowing an authenticated attacker to execute arbitrary code or disrupt network services. Users are advised to secure their devices to mitigate the risks associated with these vulnerabilities.

References