CVE-2024-28014CWE-121

Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2…

Critical · published March 28, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

🚨 A single byte overflow in multiple NEC routers could let an attacker execute commands remotely—yes, that’s right, they could take control of your devices from the internet! 🔥 Think of it like a delivery driver who only needs one wrong number on an address label to drop off a package at the wrong doorstep, but instead of a package, it's your router being handed over to the wrong person! An attacker could potentially waltz right in and execute arbitrary commands on your router, leading to total control over your network. This means they could intercept your traffic, change settings, or even use your device as a springboard for further attacks—absolutely devastating!

Put simply

Think of it like a delivery driver who only needs one wrong number on an address label to drop off a package at the wrong doorstep, but instead of a package, it's your router being handed over to the wrong person! This stack-based buffer overflow allows an attacker to exploit vulnerable NEC router devices by sending specially crafted packets that exceed the expected buffer size, thus overwriting adjacent memory and executing arbitrary code.

What to do

An attacker could potentially waltz right in and execute arbitrary commands on your router, leading to total control over your network. This means they could intercept your traffic, change settings, or even use your device as a springboard for further attacks—absolutely devastating! You must patch your devices immediately as NEC has released updates to fix this vulnerability. Make sure to apply the latest firmware for all affected models and review your network settings to enhance security. Don’t wait until it’s too late! You've got this! Just follow these steps, and your network will be safer in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00689 · 51.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-03-28T00:56Z
EPSS history
Timeline
  • 28 MAR 00:56Z
    Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2…
    cvelistv5