PT-2024-31617 · Zte · Zte Routers

Wr3Nchsr · Published 2024-09-16 · Updated 2024-09-20 · CVE-2024-45414

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ZTE Routers (affected versions not specified)

Description: The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in the webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, where the encrypted data is supplied base64 encoded. The decoded ciphertext is stored on the stack without checking its length. An unauthenticated attacker can gain remote code execution (RCE) as root by exploiting this vulnerability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-45414

Affected Products

Zte Routers

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-45414 · Security Note
• https://wr3nchsr.github.io/zte-multiple-routers-httpd-vulnerabilities-advisory · Note
• https://twitter.com/cracbot/status/1837008891210789306 · Twitter Post
• https://twitter.com/cracbot/status/1836646514615291958 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1835809916252049674 · Twitter Post
• https://t.me/cvedetector/5769 · Telegram Post
• https://twitter.com/CVEnew/status/1835783552740516134 · Twitter Post
• https://twitter.com/cracbot/status/1837371278711558251 · Twitter Post