PT-2024-22958
CVE-2024-29671
·
Published
2024-12-16
·
Updated
2024-12-17
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NEXTU FLATA AX1500 Router version 1.0.2
Description
The issue is a buffer overflow vulnerability that allows a remote attacker to execute arbitrary code via the POST request handler component. This enables the attacker to run any code they want, posing a significant risk.
Recommendations
For NEXTU FLATA AX1500 Router version 1.0.2, consider disabling the POST request handler component until a patch is available to prevent exploitation. Restrict access to the router to minimize the risk of remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾