What is the CVSS score of CVE-2024-44674?

CVE-2024-44674 has a CVSS 3.1 base score of 5.7 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 3.9%.

Is there a public PoC exploit available for CVE-2024-44674?

Yes, a public proof-of-concept exploit is available for CVE-2024-44674. Prioritise patching immediately. EPSS: 3.9%.

Covr 2600R Firmware CVE-2024-44674

MEDIUM

Stack-based Buffer Overflow (CWE-121)

2024-10-07 cve@mitre.org

Buffer Overflow Stack Overflow D-Link Covr 2600R Firmware

5.7

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

5.7 MEDIUM

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Oct 07, 2024 - 18:15 cve.org

MEDIUM 5.7

DescriptionCVE.org

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src.

AnalysisAI

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-121. D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src. Affected products include: Dlink Covr-2600R Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.