CVE-2024-12656

CVSS V2 None CVSS V3 None

Description

A vulnerability, which was classified as problematic, was found in FabulaTech USB over Network 6.0.6.1. This affects the function 0x220448 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Overview

CVE ID
CVE-2024-12656

Assigner
VulDB

Vulnerability Status
PUBLISHED

Published Version
2024-12-16T17:00:15.985Z

Last Modified Date
2024-12-16T17:24:26.512Z

Weakness Enumerations

CWE	URL
CWE-476	http://cwe.mitre.org/data/definitions/476.html
CWE-404	http://cwe.mitre.org/data/definitions/404.html

References

Reference URL	Reference Tags
https://vuldb.com/?id.288525	vdb-entry technical-description
https://vuldb.com/?ctiid.288525	signature permissions-required
https://vuldb.com/?submit.456030	third-party-advisory
https://shareforall.notion.site/FabulaTech-USB-over-Network-Client-ftusbbus2-0x220448-NPD-DOS-15160437bb1e80cb837cd715680be6ea	exploit

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-12656
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12656

History

Created	Old Value	New Value	Data Type	Notes
2024-12-17 13:41:10				Added to TrackCVE