VulnerabilityDeferred

CVE-2024-45413

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function.

HIGH 8.1EPSS 0.38%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.38%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RCE as root by exploiting this vulnerability.

CVSS 3.1: 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.38% probability · 31th percentile
CISA KEV: Not listed
Weakness: CWE-121
Source: cve@mitre.org

References

https://wr3nchsr.github.io/zte-multiple-routers-httpd-vulnerabilities-advisory/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.