CVE-2024-48457
Published: 06 January 2025
Summary
CVE-2024-48457 is a high-severity Out-of-bounds Read (CWE-125) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 1.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SC-7 (Boundary Protection).
Deeper analysis
Netis Wifi6 Router NX10 versions 2.0.1.3643 and 2.0.1.3582, along with multiple Netis Wifi 11AC Router models including NC65 3.0.0.3749, NC63 3.0.0.3327 and 3.0.0.3503, NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329, and MW5360 versions 1.0.1.3442 and 1.0.1.3031, contain an out-of-bounds read vulnerability tracked as CVE-2024-48457. The flaw resides in the /cgi-bin/skk_set.cgi endpoint and the /bin/scripts/start_wifi.sh binary, enabling unauthenticated remote access to sensitive device information and carrying a CVSS 3.1 score of 7.5.
An attacker with network access can directly target the exposed CGI endpoint to trigger the out-of-bounds read and retrieve confidential configuration or runtime data without authentication or user interaction. Successful exploitation yields high confidentiality impact while leaving integrity and availability unaffected.
The associated EPSS score has reached 0.6705, indicating substantial exploitation interest following disclosure. No vendor advisories or patches are referenced in the available sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-43219
Vulnerability details
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router…
more
MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the endpoint /cgi-bin/skk_set.cgi and binary /bin/scripts/start_wifi.sh
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct remote exploitation of public router web/CGI endpoints (T1190) resulting in unauthorized disclosure of device-stored sensitive data/credentials (T1005).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the out-of-bounds read vulnerability in affected Netis router firmware versions, preventing remote attackers from disclosing sensitive information.
Enforces boundary protections like firewall rules or network segmentation to block unauthenticated remote access to vulnerable endpoints /cgi-bin/skk_set.cgi and /bin/scripts/start_wifi.sh.
Validates inputs to the affected CGI endpoints and scripts to prevent crafted requests from triggering the out-of-bounds read and subsequent information disclosure.