CVE-2024-12654

CVSS V2 None CVSS V3 None

Description

A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerability is the function 0x220408 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Overview

CVE ID
CVE-2024-12654

Assigner
VulDB

Vulnerability Status
PUBLISHED

Published Version
2024-12-16T16:00:17.535Z

Last Modified Date
2024-12-16T16:25:35.970Z

Weakness Enumerations

CWE	URL
CWE-476	http://cwe.mitre.org/data/definitions/476.html
CWE-404	http://cwe.mitre.org/data/definitions/404.html

References

Reference URL	Reference Tags
https://vuldb.com/?id.288523	vdb-entry technical-description
https://vuldb.com/?ctiid.288523	signature permissions-required
https://vuldb.com/?submit.456028	third-party-advisory
https://shareforall.notion.site/FabulaTech-USB-over-Network-Client-ftusbbus2-0x220408-NPD-DOS-15160437bb1e803e9b3df784e61c6dcd	exploit

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-12654
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12654

History

Created	Old Value	New Value	Data Type	Notes
2024-12-17 13:40:39				Added to TrackCVE