CVE-2024-46546
HIGHNEXTU FLETA AX1500 WIFI6 Router v1.0.3 - Stack-based Buffer Overflow via URL Parameter
Title source: llmDescription
NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
References (3)
Core 3
Core References
Broken Link
https://ez-net.co.kr/new_2012/customer/download_view.php?cid=&sid=&goods=&cate=&q=&seq=233
Broken Link
https://ez-net.co.kr/new_2012/product/view.php?cid=461&sid=467&q=%C7%C3%B7%B9%C5%B8&seq=3479&page=
Exploit, Third Party Advisory
https://gist.github.com/laskdjlaskdj12/5b29b8b68f8a2279c9294708f080496b
Scores
CVSS v3
7.3
EPSS
0.0039
EPSS Percentile
31.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-121
Status
published
Products (1)
nextu/fleta_ax1500_firmware
1.0.3
Published
Apr 22, 2025
Tracked Since
Feb 18, 2026