CVE-2018-15354

A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1118.

• CWE-119

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-010-kraftway-24f2xg-router-denial-of-service/Third Party Advisory, US Government Resource
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-010-kraftway-24f2xg-router-denial-of-service/Third Party Advisory, US Government Resource

Published

Aug 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15349Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-1535IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6…5.4
• CVE-2018-15350Router Default Credentials in Kraftway 24F2XG Router firmwar…
• CVE-2018-15351Denial of service via crafting malicious link and sending it…
• CVE-2018-15352An attacker with low privileges can cause denial of service …
• CVE-2018-15353A Buffer Overflow exploited through web interface by remote …
• CVE-2018-15355Usage of SSLv2 and SSLv3 leads to transmitted data decryptio…
• CVE-2018-15356An authenticated attacker can execute arbitrary code using c…
• CVE-2018-15357An authenticated attacker with low privileges can extract pa…
• CVE-2018-15358An authenticated attacker with low privileges can activate h…
• CVE-2018-15359An authenticated attacker with low privileges can use insecu…
• CVE-2018-1536IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6…5.4