Buffer Overflow Vulnerability in Iocharger Firmware for AC Models

CVE-2024-43661

What is CVE-2024-43661?

A buffer overflow vulnerability exists in the Iocharger firmware for AC models prior to version 24120701. This issue arises when a long file path is provided to the deletion process handled by the associated CGI binary or script. Exploiting this vulnerability can lead to the crash of critical processes responsible for communication, resulting in reduced availability. Attackers may exploit this vulnerability over a network, but they require a low-privilege account to access the affected binaries or convince an authenticated user to trigger the fault. Due to the persistent nature of the denial-of-service condition created by this vulnerability, recovery options for the affected system are significantly limited.

References