CVE-2024-46215
Published: 11 October 2024
Summary
CVE-2024-46215 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 9.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A buffer overflow vulnerability tracked as CVE-2024-46215 affects the KM08-708H-v1.1 device. It resides in the sub_445BDC() function inside the /usr/sbin/goahead binary, where an unchecked strcpy call on an unbounded string leads to memory corruption, corresponding to CWE-120. The flaw carries a CVSS 3.1 score of 6.5 with an attack vector of adjacent network, low complexity, and no required privileges or user interaction, resulting in high availability impact.
An unauthenticated attacker positioned on the same local network segment can send a crafted payload that triggers the overflow, causing the goahead process to crash and denying service to the device. The supplied references consist of GitHub repositories that document the issue but contain no vendor advisories, firmware updates, or mitigation guidance. The associated EPSS score remains flat at 0.0522 with no observed increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-41790
Vulnerability details
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Platform-independent managed code eliminates the need for unchecked native buffer copies that are the root cause of classic buffer overflows.