PatchTheCVE24f2xg router firmware vulnerabilities and fixes
Recent CVEs affecting 24f2xg router firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: 24f2xgrouterfirmware.
24f2xg router firmware has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2018-08-17. Highest priority: CVE-2018-15353 (score 63/100).
- CVE-2018-15355 MEDIUM 5.9 UPGRADE Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118.
- CVE-2018-15354 HIGH 7.5 UPGRADE A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 2
- CVE-2018-15353 CRITICAL 9.8 UPGRADE A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftw
- CVE-2018-15352 MEDIUM 6.5 MITIGATE An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.
- CVE-2018-15351 MEDIUM 6.5 UPGRADE Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service
- CVE-2018-15350 CRITICAL 9.8 UPGRADE Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to ge
FAQ
How do I fix 24f2xg router firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 24f2xg router firmware being exploited right now?
None of the tracked 24f2xg router firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 24f2xg router firmware CVE should I patch first?
CVE-2018-15353 currently ranks highest (63/100): A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftw.