CVE-2024-52025

Summary

CVE-2024-52025 is a newly discovered stack overflow vulnerability affecting Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 routers. This issue is located in the geniepppoe.cgi file, specifically the pppoe_localip parameter. By sending a maliciously crafted POST request, attackers can exploit this vulnerability and trigger a stack overflow, leading to a Denial of Service (DoS) condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.