CVERadar

CVE-2024-48710

Medium Severity

SVRS

30/100

CVSSv3

NA/10

EPSS

0.00038/1

CVE-2024-48710: Stack overflow vulnerability in TP-Link TL-WDR7660 1.0 due to improper handling of the 'string name' parameter in the wlanTimerRuleJsonToBin function. This vulnerability allows for potential remote code execution. The TP-Link TL-WDR7660 router is susceptible to a stack overflow (CWE-120) because the string name parameter is not checked. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 30, indicating a moderate risk. Successful exploitation can result in a complete compromise of the device. Despite the moderate SVRS, it's crucial to patch this security flaw promptly to prevent potential attacks.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence

Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.

CREATE FREE ACCOUNT

CVE Details

Access comprehensive CVE information instantly

Real-time Tracking

Subscribe to CVEs and get instant updates

Exploit Analysis

Monitor related APT groups and threats

IOC Tracking

Analyze and track CVE-related IOCs

News

CVE-2024-48710 | TP-Link TL-WDR7660 1.0 wlanTimerRuleJsonToBin string name stack-based overflow

vuldb.com2024-10-15

CVE-2024-48710 | TP-Link TL-WDR7660 1.0 wlanTimerRuleJsonToBin string name stack-based overflow | A vulnerability, which was classified as critical, was found in TP-Link TL-WDR7660 1.0. This affects the function wlanTimerRuleJsonToBin. The manipulation of the argument string name leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-48710. It is

cve-2024-48710

domains

urls

cves

Social Media

Vulmon Vulnerability Feed

@VulmonFeeds

2024-10-16

CVE-2024-48710 Stack Overflow Vulnerability in TP-Link TL-WDR7660 1.0's WLAN Timer Function The TP-Link TL-WDR7660 1.0 has a vulnerability in the wlanTimerRuleJsonToBin function. It doesn't validate the string na... https://t.co/pY508wdqG3

CVE

@CVEnew

2024-10-15

CVE-2024-48710 In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities. https://t.co/B8o7MBcX0i

Affected Software

No affected software found for this CVE

References

Reference	Link
[email protected]	https://github.com/sezangel/IOT-vul/blob/main/TPlink/TL-WDR7660/1/readme.md

CWE Details

CWE ID	CWE Name	Description
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence