PT-2025-13832 · NetGear · Wnr854T

Published 2024-11-16 · Updated 2025-03-31 · CVE-2024-54809

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear Inc WNR854T version 1.5.2

Description The issue is a stack-based buffer overflow due to the use of a request header parameter in a strncpy function where the size is determined based on the input specified. This occurs in the parse st header function. An attacker can exploit this by sending a specially crafted packet, allowing them to take control of the program counter and hijack the control flow of the program to execute arbitrary system commands.

Recommendations For Netgear Inc WNR854T version 1.5.2, as a temporary workaround, consider disabling the parse st header function until a patch is available. Restrict access to the vulnerable parse st header function to minimize the risk of exploitation. Avoid using the request header parameter in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-03669

CVE-2024-54809

Affected Products

Wnr854T

References · 5

• 🔥 https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#809 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-54809 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54809 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03669 · Security Note
• https://twitter.com/CVEnew/status/1906817438852776073 · Twitter Post