CVE-2024-36493
Published: 14 January 2025
Summary
CVE-2024-36493 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Wavlink Wl-Wn533A8 Firmware. Its CVSS base score is 9.1 (Critical).
Operationally, ranked in the top 30.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Flaw remediation directly addresses the stack-based buffer overflow by identifying, patching, and testing the vulnerable set_wifi_basic() function in the firmware.
Information input validation prevents specially crafted HTTP requests from overflowing the stack buffer in wireless.cgi by enforcing bounds and format checks on inputs.
Memory protection mechanisms like stack canaries, ASLR, and DEP mitigate exploitation of the stack-based buffer overflow even if invalid inputs are processed.
NVD Description
A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Deeper analysisAI
CVE-2024-36493 is a stack-based buffer overflow vulnerability (CWE-121) in the set_wifi_basic() functionality of the wireless.cgi component within Wavlink AC3000 firmware version M33A8.V5030.210505. The issue arises when processing a specially crafted HTTP request, which can overflow the stack buffer and enable arbitrary command execution.
An authenticated attacker with high privileges (PR:H) can exploit this vulnerability remotely over the network (AV:N) with low attack complexity (AC:L) and no user interaction required (UI:N). Exploitation leads to high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) with a changed scope (S:C), as reflected in its CVSS v3.1 base score of 9.1. This allows the attacker to execute arbitrary commands on the affected device.
The primary advisory from Talos Intelligence, available at https://talosintelligence.com/vulnerability_reports/TALOS-2024-2041, details the vulnerability and provides guidance for practitioners. Security teams should review this report for recommended mitigations, including any available patches or configuration changes for the Wavlink AC3000 device.
Details
- CWE(s)