CVE-2024-45413
Published: 16 September 2024
Summary
CVE-2024-45413 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Github (inferred from references). Its CVSS base score is 8.1 (High).
Operationally, ranked at the 38.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-41465
Vulnerability details
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its…
more
length. An authenticated attacker can get RCE as root by exploiting this vulnerability.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.