CVE-2025-11131

In nr modem, there is a possible system crash due to improper input validation

High · published December 1, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

⚡ A single unexpected input could crash your nr modem, causing a remote denial of service! Think of it like a restaurant that can’t handle orders from multiple tables - one wrong dish sends the whole system into chaos, leaving hungry customers waiting indefinitely! An attacker could trigger a system crash, rendering your modem unusable and halting your internet access. This could lead to significant disruption, especially if it happens during critical work hours or streaming marathons!

Put simply

Think of it like a restaurant that can’t handle orders from multiple tables - one wrong dish sends the whole system into chaos, leaving hungry customers waiting indefinitely! This vulnerability, CVE-2025-11131, arises from improper input validation in the nr modem, which allows a remote attacker to cause a denial of service with no additional access privileges required.

What to do

An attacker could trigger a system crash, rendering your modem unusable and halting your internet access. This could lead to significant disruption, especially if it happens during critical work hours or streaming marathons! To mitigate this, make sure to update your nr modem firmware to the latest version as soon as it’s available. Additionally, review your input validation processes to ensure they can handle unexpected values gracefully. Keep an eye on vendor notifications for any specific patches. You've got this! By taking action now, you’ll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.1th percentile
Published
2025-12-01T07:35Z
EPSS history
Timeline
  • 01 DEC 07:35Z
    In nr modem, there is a possible system crash due to improper input validation
    cvelistv5