CVE-2024-12988 is a critical buffer overflow vulnerability found in Netgear R6900P and R7000P routers version 1.3.3.154. Specifically, the flaw exists in the 'HTTP Header Handler' component, function 'sub_16C4C', where manipulation of the 'Host' argument can trigger the overflow. Although the CVSS score is 7.3, the SOCRadar Vulnerability Risk Score (SVRS) is 66, indicating a moderate risk. The exploit is publicly available, meaning attacks are possible. This remote exploit allows attackers to potentially gain unauthorized access or disrupt service. It is important to note that this vulnerability affects Netgear products that are no longer supported, therefore patching isn't possible and mitigation strategies are vital. Organizations using these routers should consider replacing them or implementing compensating controls to minimize risk.