CVE-2024-39774

A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.

• CWE-120

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2030Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2030Exploit, Third Party Advisory

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39769Multiple buffer overflow vulnerabilities exist in the intern…7.2
• CVE-2024-3977The WordPress Jitsi Shortcode WordPress plugin through 0.1 d…4.8
• CVE-2024-39770Multiple buffer overflow vulnerabilities exist in the intern…7.2
• CVE-2024-39771QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 an…6.8
• CVE-2024-39772Mattermost Desktop App versions <=5.8.0 fail to safeguard sc…5.3
• CVE-2024-39773An information disclosure vulnerability exists in the testsa…5.3
• CVE-2024-39775in OpenHarmony v4.1.0 and prior versions allow a remote atta…7.5
• CVE-2024-39776Avtec Outpost stores sensitive information in an insecure lo…7.5
• CVE-2024-39777Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <=…9.6
• CVE-2024-39778When a stateless virtual server is configured on BIG-IP syst…7.5
• CVE-2024-39779Stack-based buffer overflow in some drivers for Intel(R) Eth…5.7
• CVE-2024-3978The WordPress Jitsi Shortcode WordPress plugin through 0.1 d…5.4