CVE-2025-29047

Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the hiddenIndex in the…

Critical · published April 17, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

🔥 A hidden vulnerability in the ALFA WiFi CampPro router can let attackers execute arbitrary code with just a little finesse! Think of it like a hotel manager who leaves a hidden back door unlocked, allowing anyone to waltz in and throw a wild party in the penthouse suite — a complete breach of trust for all the guests! The implications are absolutely devastating — an attacker could gain control of the router and execute any command they like, potentially intercepting traffic or launching further attacks on your network. This isn't just a breach; it's an open invitation to chaos!

Put simply

Think of it like a hotel manager who leaves a hidden back door unlocked, allowing anyone to waltz in and throw a wild party in the penthouse suite — a complete breach of trust for all the guests! This buffer overflow vulnerability in the StorageEditUser function can be exploited by sending specially crafted requests to the hiddenIndex parameter, allowing an attacker to run malicious code remotely.

What to do

The implications are absolutely devastating — an attacker could gain control of the router and execute any command they like, potentially intercepting traffic or launching further attacks on your network. This isn't just a breach; it's an open invitation to chaos! Immediate action is crucial! Update your ALFA WiFi CampPro router to version ALFA_CAMPRO-co-2.29 or later to patch this vulnerability. Additionally, consider changing your default passwords and disabling remote access if it's not needed. You've got this! With these simple steps, you can secure your network and keep those sneaky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Published
2025-04-17T00:00Z
EPSS history
Timeline
  • 17 APR 00:00Z
    Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the hiddenIndex in the…
    cvelistv5