CVE Bulletin

CVE-2024-32991 through CVE-2024-32993

Written by Mission Secure | May 11, 2024 4:36:00 PM

CVE-2024-32991, CVE-2024-32992, and CVE-2024-32993 pose significant risks to OT environments. CVE-2024-32991 involves a permission verification vulnerability in the wpa_supplicant module, CVE-2024-32992 highlights an insufficient verification vulnerability in the baseband module, and CVE-2024-32993 concerns an out-of-bounds access vulnerability in the memory module. Exploitation of these vulnerabilities could lead to disruptions in availability crucial for OT operations.

From the CVE database:

CVE-2024-32991, Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.

https://www.cve.org/CVERecord?id=CVE-2024-32991 

CVE-2024-32992, Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.

https://www.cve.org/CVERecord?id=CVE-2024-32992

CVE-2024-32993, Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.

https://www.cve.org/CVERecord?id=CVE-2024-32993