CVE-2025-29044

Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key value

Critical · published April 17, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

🚨 A remote attacker can execute arbitrary code just by sending a crafted QUERY_STRING to your Netgear R61 router! 🔥 Think of the router as a restaurant kitchen. If someone sneaks in a fake order ticket that the chef doesn’t double-check, they could end up cooking something totally unauthorized — and potentially disastrous! This buffer overflow vulnerability could allow attackers to take over your router completely, compromising your network integrity. They could manipulate traffic, steal sensitive information, or even launch attacks on other devices connected to your network — a recipe for chaos!

Put simply

Think of the router as a restaurant kitchen. If someone sneaks in a fake order ticket that the chef doesn’t double-check, they could end up cooking something totally unauthorized — and potentially disastrous! This vulnerability in Netgear R61 router (version V1.0.1.28) arises from improper handling of the QUERY_STRING key, enabling remote code execution. Simply put, an attacker can send a specially crafted request that tricks the router into executing malicious code.

What to do

This buffer overflow vulnerability could allow attackers to take over your router completely, compromising your network integrity. They could manipulate traffic, steal sensitive information, or even launch attacks on other devices connected to your network — a recipe for chaos! Update your Netgear R61 router to the latest firmware version immediately to patch this critical vulnerability. Ensure your network settings are secure and consider changing default credentials to strengthen your defenses. You've got this! Follow these steps to secure your router and keep your network safe from unwanted intruders! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Published
2025-04-17T00:00Z
EPSS history
Timeline
  • 17 APR 00:00Z
    Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key value
    cvelistv5