CVE-2024-46215
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GIGA WIFI Wave KM08-708H是GIGA WIFI Wave公司的一款无线设备。 GIGA WIFI Wave KM08-708H v1.1版本存在安全漏洞，该漏洞源于strcpy函数在执行时没有检查字符串的长度，从而导致缓冲区溢出。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-46215
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
GIGA WIFI Wave KM08-708H 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GIGA WIFI Wave KM08-708H是GIGA WIFI Wave公司的一款无线设备。 GIGA WIFI Wave KM08-708H v1.1版本存在安全漏洞，该漏洞源于strcpy函数在执行时没有检查字符串的长度，从而导致缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2024-46215
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-46215
请登录查看更多情报信息。
Same Patch Batch · n/a · 2024-10-11 · 41 CVEs total
| CVE-2024-21534 | 9.8 CRITICAL | JSONPath Plus 安全漏洞 |
| CVE-2024-35522 | 8.4 HIGH | NETGEAR EX3700 安全漏洞 |
| CVE-2024-35517 | 8.4 HIGH | NETGEAR XR1000 安全漏洞 |
| CVE-2024-9855 | 4.7 MEDIUM | 07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload |
| CVE-2024-9856 | 2.4 LOW | 07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting |
| CVE-2024-48774 | Fermax com.fermax.vida 安全漏洞 | |
| CVE-2024-48788 | Messe Frankfurt com.yescam.YesCam.zwave 安全漏洞 | |
| CVE-2024-48778 | Giant Bicycles RideLink 安全漏洞 | |
| CVE-2024-48937 | Znuny 安全漏洞 | |
| CVE-2024-48776 | Shelly com.home.shelly 安全漏洞 | |
| CVE-2024-48787 | Revic Optics Revic Ops 安全漏洞 | |
| CVE-2024-48769 | BURG-WCHTER KG de.burgwachter.keyapp.app 安全漏洞 | |
| CVE-2024-48771 | Almando Play 安全漏洞 | |
| CVE-2024-48775 | Plug n Play Camera com.ezset.delaney 安全漏洞 | |
| CVE-2024-46532 | OpenHIS 安全漏洞 | |
| CVE-2024-48786 | SwitchBot 安全漏洞 | |
| CVE-2024-42018 | Atos Eviden SMC xScale 安全漏洞 | |
| CVE-2024-48784 | SAMPMAX com.sampmax.homemax 安全漏洞 | |
| CVE-2024-48938 | Znuny 安全漏洞 | |
| CVE-2024-48772 | C-CHIP 安全漏洞 |
Showing top 20 of 41 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-46215
No comments yet