CVE-2024-52016

—

CVSS 3.1

5.7 medium

EPSS

<1%p34

Published

Nov 5, 2024 (Nov 5, 2024)

Modified

Jun 17, 2026

Description

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendors: netgear
Products: r8500 firmware, xr300 firmware, r7000p firmware, r6400v2 firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.