VULNERABILITY INTELLIGENCE

CVE-2024-54808

CVSS score9.8 CRITICAL
EPSS probability0.78%
CISA KEVNot currently listed
Published2025-03-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Netgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the SetDefaultConnectionService function due to an unconstrained use of sscanf. The vulnerability allows for control of the program counter and can be utilized to achieve arbitrary code execution.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-121

Primary references