CVE-2024-39769
Published: 14 January 2025
Summary
CVE-2024-39769 is a critical-severity Classic Buffer Overflow (CWE-120) vulnerability in Wavlink Wl-Wn533A8 Firmware. Its CVSS base score is 9.1 (Critical).
Operationally, ranked in the top 34.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents stack-based buffer overflows by validating the length and format of the `cli_mac` POST parameter in the internet.cgi set_qos() function.
Implements runtime memory protections such as stack canaries, ASLR, and non-executable memory to block exploitation of the stack-based buffer overflow for arbitrary code execution.
Requires identification, reporting, and correction of the buffer overflow flaw in the Wavlink firmware, enabling patching to eliminate the vulnerability.
NVD Description
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability exists in…
more
the `cli_mac` POST parameter.
Deeper analysisAI
CVE-2024-39769 consists of multiple stack-based buffer overflow vulnerabilities in the internet.cgi set_qos() functionality of the Wavlink AC3000 firmware version M33A8.V5030.210505. These issues, classified under CWE-120, are triggered by a specially crafted HTTP request targeting the `cli_mac` POST parameter. The vulnerability received a CVSS v3.1 base score of 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) upon publication on 2025-01-14.
An authenticated attacker with high privileges (PR:H) can exploit these vulnerabilities remotely over the network (AV:N) with low attack complexity and no user interaction. By sending a malicious HTTP POST request, the attacker triggers the buffer overflow, potentially achieving high impacts on confidentiality, integrity, and availability across the affected scope (S:C), such as arbitrary code execution or system crashes.
Mitigation guidance and additional technical details are available in the Talos Intelligence advisory at https://talosintelligence.com/vulnerability_reports/TALOS-2024-2022.
Details
- CWE(s)