by Kastro
Paper/Archive/CVE-2024-57471

CVE-2024-57471

mitre — H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing…

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.0.560 × 2011.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgist.github.com/XiaoCurry/88a43c9a68694941221eb7592da39d4c