PT-2024-31616 · Zte · Zte Routers

Wr3Nchsr · Published 2024-09-16 · Updated 2024-09-20 · CVE-2024-45413

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ZTE routers (affected versions not specified)

Description: The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in the rsa decrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, and the decrypted data is stored on the stack without checking its length. An authenticated attacker can get remote code execution (RCE) as root by exploiting this vulnerability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-45413

Affected Products

Zte Routers

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-45413 · Security Note
• https://wr3nchsr.github.io/zte-multiple-routers-httpd-vulnerabilities-advisory · Note
• https://twitter.com/cracbot/status/1837371277205721549 · Twitter Post
• https://t.me/cvedetector/5768 · Telegram Post
• https://twitter.com/cracbot/status/1837008889713512867 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1835809159582740977 · Twitter Post
• https://twitter.com/cracbot/status/1836646513013067832 · Twitter Post
• https://twitter.com/CVEnew/status/1835783551679431002 · Twitter Post