CVE-2024-36272

A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.

• CWE-120

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2045Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2045Exploit, Third Party Advisory

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36265** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vuln…9.8
• CVE-2024-36266A vulnerability has been identified in PowerSys (All version…7.8
• CVE-2024-36267Path traversal vulnerability exists in Redmine DMSF Plugin v…8.1
• CVE-2024-36268Improper Control of Generation of Code ('Code Injection') vu…9.8
• CVE-2024-3627The Wheel of Life: Coaching and Assessment Tool for Life Coa…5.4
• CVE-2024-36270In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36274Out-of-bounds write in the Intel(R) 800 Series Ethernet Driv…7.1
• CVE-2024-36275NULL pointer dereference in some Intel(R) Optane(TM) PMem Ma…6.1
• CVE-2024-36276Insecure inherited permissions for some Intel(R) CIP softwar…7.8
• CVE-2024-36277Improper verification of cryptographic signature issue exist…5.3
• CVE-2024-36278in OpenHarmony v4.0.0 and prior versions allow a local attac…3.3
• CVE-2024-36279Reliance on obfuscation or encryption of security-relevant i…5.3