CVE-2024-28052: level1 wbr-6012_firmware Incorrect Calculation of Buffer Size

Vulnerability summary

CVE-2024-28052 is a high (CVSS 7.5) Incorrect Calculation of Buffer Size vulnerability in level1 wbr-6012_firmware. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 30-10-2024
   PublishedVulnerability first disclosed.
2. 30-10-2024
   Last modifiedVulnerability information updated.

Description

The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while aiming to be easy to configure and operate. In addition to providing a WiFi access point, the device serves as a 4-port wired router and implements a variety of common SOHO router capabilities such as port forwarding, quality-of-service, web-based administration, a DHCP server, a basic DMZ, and UPnP capabilities.

• CWE-131Incorrect Calculation of Buffer SizeThe product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.