CVE-2024-46546 — HIGH (7.3)

Vulnerability Description

NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Nextu	Fleta Ax1500 Firmware	1.0.3
Nextu	Fleta Ax1500	-

Related Weaknesses (CWE)

CWE-121

References

https://ez-net.co.kr/new_2012/customer/download_view.php?cid=&sid=&goods=&cate=&Broken Link
https://ez-net.co.kr/new_2012/product/view.php?cid=461&sid=467&q=%C7%C3%B7%B9%C5Broken Link
https://gist.github.com/laskdjlaskdj12/5b29b8b68f8a2279c9294708f080496bExploitThird Party Advisory

FAQ

What is CVE-2024-46546?

CVE-2024-46546 is a vulnerability with a CVSS score of 7.3 (HIGH). NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) vi...

How severe is CVE-2024-46546?

CVE-2024-46546 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-46546?

Check the references section above for vendor advisories and patch information. Affected products include: Nextu Fleta Ax1500 Firmware, Nextu Fleta Ax1500.