CVE-2025-22907

RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function

Critical · published January 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

🔥 A stack overflow is hiding in RE11S v1.11, ready to crash the party through the selSSID parameter! Think of it as a restaurant where a diner orders an absurdly large dish that forces the entire kitchen to shut down — too much input can literally overwhelm the system, causing it to fail spectacularly. If exploited, an attacker could trigger this stack overflow, potentially leading to unexpected behavior or even a denial of service. Imagine losing access to critical systems just because one parameter was overloaded — it could be absolutely devastating!

Put simply

Think of it as a restaurant where a diner orders an absurdly large dish that forces the entire kitchen to shut down — too much input can literally overwhelm the system, causing it to fail spectacularly. This vulnerability occurs in the formWlSiteSurvey function, where the selSSID parameter can be manipulated, leading to a stack overflow and compromising system stability.

What to do

If exploited, an attacker could trigger this stack overflow, potentially leading to unexpected behavior or even a denial of service. Imagine losing access to critical systems just because one parameter was overloaded — it could be absolutely devastating! Immediate action is crucial: update RE11S to the latest version that addresses this vulnerability. Review your systems to ensure this version is not in use, and consider implementing input validation to avoid overflow issues in the future. You've got this! With these steps, you'll ensure your system remains robust and secure. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Published
2025-01-16T00:00Z
EPSS history
Timeline
  • 16 JAN 00:00Z
    RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function
    cvelistv5