CVE-2024-21475

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published May 6, 2024
CWE ID 823

Summary

CVE-2024-21475 is a memory corruption vulnerability that arises when the firmware's expected protocol size is not matched by the payload received. This issue can lead to unintended code execution or denial of service, posing a significant threat to system stability and security. Attackers can exploit this vulnerability by sending specially crafted firmware updates to gain unauthorized access or disrupt normal operations. System administrators are advised to apply patches as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share