{"id":"CVE-2024-35106","aliases":["EUVD-2025-5055","GHSA-g7f5-75x6-qxhr"],"status":"published","title":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS....","description":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00522,"percentile":0.44798,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-120"],"published":"2025-02-07T00:00:00Z","modified":"2026-06-17T07:34:22Z","exploits":[{"source":"pocgithub","id":"laskdjlaskdj12/CVE-2024-35106-POC","title":"laskdjlaskdj12/CVE-2024-35106-POC","date":"2025-02-06","url":"https://github.com/laskdjlaskdj12/CVE-2024-35106-POC"}],"references":[{"url":"https://ez-net.co.kr/new_2012/customer/download_view.php?cid=\u0026sid=\u0026goods=\u0026cate=\u0026q=\u0026seq=233"},{"url":"https://ez-net.co.kr/new_2012/product/view.php?cid=461\u0026sid=467\u0026q=%C7%C3%B7%B9%C5%B8\u0026seq=3479\u0026page="},{"url":"https://gist.github.com/laskdjlaskdj12/571db73f18be1da1271fa1eb09f488de"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35106"},{"url":"https://github.com/advisories/GHSA-g7f5-75x6-qxhr"}],"sources":{"cve":[{"id":"CVE-2024-35106","description":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request.","status":"published","published":"2025-02-07T00:00:00Z","modified":"2025-02-11T15:17:00.594Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:20.313092Z"}],"euvd":[{"id":"EUVD-2025-5055","description":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request.","status":"published","published":"2025-02-07T00:00:00Z","modified":"2025-02-11T15:17:00Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:03:59.807436Z"}],"ghsa":[{"id":"GHSA-g7f5-75x6-qxhr","title":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS....","description":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request.","status":"published","published":"2025-02-07T15:32:38Z","modified":"2025-02-10T18:31:52Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:59:51.123256Z"}],"nvd":[{"id":"CVE-2024-35106","description":"NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request.","status":"published","published":"2025-02-07T15:15:16.877Z","modified":"2026-06-17T07:34:22.34Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:10:44.033107Z"}]}}