CVE-2025-29046

Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the GAPSMinute3 key value

Critical · published April 17, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

🔥 An attacker can execute arbitrary code on your ALFA WiFi CampPro router with just a carefully crafted value! Think of it like a delivery person who can manipulate the instructions on a package without you ever knowing — they could add whatever they want before it reaches your door. In this case, the GAPSMinute3 key value is that sneaky instruction! This buffer overflow vulnerability is absolutely devastating. A remote attacker could take complete control of your router, potentially intercepting sensitive data, redirecting traffic, or launching attacks on your network. Your smart home devices could become unwitting participants in a larger scheme!

Put simply

Think of it like a delivery person who can manipulate the instructions on a package without you ever knowing — they could add whatever they want before it reaches your door. In this case, the GAPSMinute3 key value is that sneaky instruction! This buffer overflow flaw in the ALFA WiFi CampPro router allows attackers to exploit the GAPSMinute3 key, letting them inject and execute malicious code remotely without authentication.

What to do

This buffer overflow vulnerability is absolutely devastating. A remote attacker could take complete control of your router, potentially intercepting sensitive data, redirecting traffic, or launching attacks on your network. Your smart home devices could become unwitting participants in a larger scheme! Immediately apply the latest firmware update to version ALFA_CAMPRO-co-2.30 or higher. Additionally, consider changing default settings and passwords to enhance security. Regularly check for security advisories related to your devices! You can tackle this! By following these steps, you'll be well on your way to protecting your network. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Published
2025-04-17T00:00Z
EPSS history
Timeline
  • 17 APR 00:00Z
    Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the GAPSMinute3 key value
    cvelistv5