CVE-2023-33082CWE-120

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Critical · published December 5, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

🔥 A memory corruption bug lurks in the way some devices handle Association Requests, making it a prime target for exploitation! Think of it as a chef in a busy kitchen adding too much salt to a dish without checking the recipe—the entire meal goes off-balance! Here, the error causes unexpected behavior that could lead to critical failures in your system. An attacker could exploit this flaw to crash the device or execute arbitrary code, potentially gaining control over it. The fallout could be absolutely devastating, impacting not just individual devices but also network stability and security.

Put simply

Think of it as a chef in a busy kitchen adding too much salt to a dish without checking the recipe—the entire meal goes off-balance! Here, the error causes unexpected behavior that could lead to critical failures in your system. This vulnerability arises from memory corruption when processing Association Requests containing BTM Queries or Responses with MBO Information Elements. It's like a mismanaged data stream that spills out of control, leading to chaos.

What to do

An attacker could exploit this flaw to crash the device or execute arbitrary code, potentially gaining control over it. The fallout could be absolutely devastating, impacting not just individual devices but also network stability and security. To protect against this vulnerability, ensure all your devices are updated with the latest firmware patches that address CVE-2023-33082. Review your systems for any affected configurations and apply the security updates immediately! You've got this! With a little attention and timely action, you can secure your systems and keep everything running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00528 · 43.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-12-05T03:04Z
EPSS history
Timeline
  • 05 DEC 03:04Z
    Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
    cvelistv5