CVE-2024-48456
Published: 06 January 2025
Summary
CVE-2024-48456 is a high-severity Out-of-bounds Read (CWE-125) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 0.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-7 (Boundary Protection) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2024-48456 is an information disclosure vulnerability affecting the web interface of multiple Netis router models and firmware versions, including Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582, Wifi 11AC Router NC65 3.0.0.3749, NC63 3.0.0.3327 and 3.0.0.3503, NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329, and Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031. The flaw resides in the change admin password page, where the password parameter can be abused to leak sensitive data, corresponding to CWE-125 and carrying a CVSS 3.1 score of 7.5.
A remote attacker with no credentials or user interaction can target the exposed web interface over the network to extract sensitive information such as administrative credentials. The attack requires only network reachability to the router management page and succeeds due to insufficient access controls or input handling around the password parameter.
The single provided reference points to a GitHub project view without detailing patches or mitigation steps. The associated EPSS score stands at 0.8258 with no indicated change from a lower baseline.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-43218
Vulnerability details
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router…
more
MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the parameter password at the change admin password page at the router web interface.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct unauthenticated exploitation of public web interface (T1190) yields admin credentials via out-of-bounds read, enabling credential access (T1552).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Validates inputs like the 'password' parameter to prevent out-of-bounds reads that disclose sensitive information via crafted requests to the router web interface.
Requires timely remediation of flaws such as the out-of-bounds read vulnerability in affected Netis router firmware to eliminate the information disclosure risk.
Enforces boundary protection to restrict network access to the vulnerable router web management interface, preventing unauthenticated remote exploitation.