CVE-2024-45162

A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field

Critical · published October 29, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in the phddns client of Blu-Castle BCUM221E 1.0.0P220507 makes for an alarming vulnerability! 🔥 Think of it like a crowded restaurant where a waiter overfills a soup bowl. Eventually, the soup spills over onto the table, causing chaos and a mess for everyone around. In this case, the overflow can lead to unexpected behavior or even a full system compromise! An attacker could exploit this vulnerability to execute arbitrary code, potentially allowing them to take control of the affected system. Imagine a hacker slipping into your system undetected, altering configurations, or stealing sensitive data. The stakes are high, and immediate action is crucial!

Put simply

Think of it like a crowded restaurant where a waiter overfills a soup bowl. Eventually, the soup spills over onto the table, causing chaos and a mess for everyone around. In this case, the overflow can lead to unexpected behavior or even a full system compromise! This vulnerability occurs due to improper handling of user input in the password field, which can lead to a stack-based buffer overflow, allowing attackers to overwrite memory and execute malicious code.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially allowing them to take control of the affected system. Imagine a hacker slipping into your system undetected, altering configurations, or stealing sensitive data. The stakes are high, and immediate action is crucial! To safeguard your systems, immediately update to the patched version of the Blu-Castle client. It's also a good idea to conduct a thorough review of input validation procedures and implement robust boundary checks to prevent similar vulnerabilities. You've got this! By taking these steps, you'll bolster your security and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Published
2025-10-29T00:00Z
EPSS history
Timeline
  • 29 OCT 00:00Z
    A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field
    cvelistv5