ID
VAR-202503-4030
CVE
CVE-2024-54809
TITLE
of netgear WNR854T Stack-based buffer overflow vulnerability in firmware
Trust: 0.8
DESCRIPTION
Netgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the parse_st_header function due to use of a request header parameter in a strncpy where size is determined based on the input specified. By sending a specially crafted packet, an attacker can take control of the program counter and hijack control flow of the program to execute arbitrary system commands. of netgear WNR854T A stack-based buffer overflow vulnerability exists in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. NETGEAR WNR854T is a wireless router from NETGEAR. NETGEAR WNR854T 1.5.2 version has a buffer overflow vulnerability. The vulnerability is caused by the parse_st_header function failing to correctly verify the length of the input data. Remote attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | netgear | model: | wnr854t | scope: | eq | version: | 1.5.2 | Trust: 1.6 |
| vendor: | ネットギア | model: | wnr854t | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | wnr854t | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | wnr854t | scope: | eq | version: | wnr854t firmware 1.5.2 | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-54809 | Trust: 3.2 |
| db: | JVNDB | id: | JVNDB-2024-022328 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-07795 | Trust: 0.6 |
REFERENCES
| url: | https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#809 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-54809 | Trust: 1.4 |
SOURCES
| db: | CNVD | id: | CNVD-2025-07795 |
| db: | JVNDB | id: | JVNDB-2024-022328 |
| db: | NVD | id: | CVE-2024-54809 |
LAST UPDATE DATE
2025-04-22T23:25:40.545000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-07795 | date: | 2025-04-21T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-022328 | date: | 2025-04-18T01:16:00 |
| db: | NVD | id: | CVE-2024-54809 | date: | 2025-04-17T12:54:59.290 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-07795 | date: | 2025-04-21T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-022328 | date: | 2025-04-18T00:00:00 |
| db: | NVD | id: | CVE-2024-54809 | date: | 2025-03-31T21:15:48.527 |