CVE-2025-22913

RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function

Critical · published January 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

🔥 A stack overflow resides in the rootAPmac parameter of RE11S v1.11, waiting to be triggered! Think of this vulnerability like a party balloon filled too much—eventually, it pops and creates a mess! In this case, a carefully crafted input can overflow the stack, leading to unexpected behaviors or crashes. An attacker could exploit this vulnerability to crash the system or potentially execute arbitrary code, which is absolutely devastating! This could leave your application vulnerable to all kinds of attacks and disruptions, jeopardizing data integrity and service availability.

Put simply

Think of this vulnerability like a party balloon filled too much—eventually, it pops and creates a mess! In this case, a carefully crafted input can overflow the stack, leading to unexpected behaviors or crashes. This stack overflow occurs in the formStaDrvSetup function when it processes the rootAPmac parameter. If the input exceeds the expected size, it can overwrite critical memory, leading to unpredictable behavior.

What to do

An attacker could exploit this vulnerability to crash the system or potentially execute arbitrary code, which is absolutely devastating! This could leave your application vulnerable to all kinds of attacks and disruptions, jeopardizing data integrity and service availability. To remediate this, immediately update to the patched version of RE11S. Ensure input validation is implemented to restrict the size of the rootAPmac parameter. Regularly audit your systems for updates and vulnerabilities to stay ahead. You've got this! Take action now and secure your environment like the hero you are! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00778 · 55.4th percentile
Published
2025-01-16T00:00Z
EPSS history
Timeline
  • 16 JAN 00:00Z
    RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function
    cvelistv5