Critical severity · published Sep 4, 2024
CVE-2024-8408
Linksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflow
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability was found in Linksys WRT54G 4.21.5. It has been rated as critical. Affected by this issue is the function validate_services_port of the file /apply.cgi of the component POST Parameter Handler. The manipulation of the argument services_array leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WR
WRT54G · Linksys
4.21.5 · source: vendor, CISA
WF
Wrt54g Firmware · Linksys
4.21.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-8408
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-8408
Exploit
https://github.com/BuaaIOTTeam/Iot_Linksys/blob/main/Linksys_WRT54G_validate_services_port.md
Permissions Required
https://vuldb.com/?ctiid.276488
Permissions Required
https://vuldb.com/?id.276488
Third Party Advisory
https://vuldb.com/?submit.398567
Product
https://www.linksys.com/
More from WRT54G
–
CVE-2011-4499
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4…
–
CVE-2008-1265
The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface
–
CVE-2008-1264
The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML…
–
CVE-2008-1263
The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP…
–
CVE-2008-1247
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary…