Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-25139

In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level. This is fixed in ER605(UN)_v2_2.2.4 Build 020240119.

Published

2024-03-14T16:15:50.077

Last Modified

2025-09-18T16:30:09.377

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 10.0 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tp-link omada_er605_firmware ≤ 2.2.3 Yes
Hardware tp-link omada_er605 2.6 No
References