CVE-2024-25139 Integer overflow in n/a
An integer overflow in the cloud-brd binary allows attackers to execute arbitrary code with root privileges on TP-Link Omada ER605 routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-25139?
CVE-2024-25139 is a critical vulnerability in n/a, published on 14 Mar 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level. This is fixed in ER605(UN)_v2_2.2.4 Build 020240119.
Weakness: CWE-120
Which versions are affected by CVE-2024-25139?
It affects 1 product.
Products include Tp-Link Omada Er605 Firmware.
How do I fix CVE-2024-25139?
No fix has been published for CVE-2024-25139 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-25139 being exploited?
There is no known exploitation of CVE-2024-25139 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2024-5227 TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability
- CVE-2024-5228 TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-5242 TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-5243 TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-1179 TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability
Sources
Also known as GHSA-xhjf-xjwg-rm34.