CVE-2025-3711CWE-121

ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

Critical · published May 9, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in the LCD KVM over IP Switch could let anyone with bad intentions run wild—literally execute arbitrary code remotely without even logging in! 🔥 Think of it like a drive-thru where the cashier takes your order without checking your ID. If they aren’t careful, anyone could order anything and drive away with it, causing chaos! An attacker could take control of the affected device, potentially compromising sensitive data, altering configurations, or disrupting operations entirely. The implications could be absolutely devastating for any organization relying on this device for remote management.

Put simply

Think of it like a drive-thru where the cashier takes your order without checking your ID. If they aren’t careful, anyone could order anything and drive away with it, causing chaos! This vulnerability allows unauthenticated attackers to exploit a flaw in the firmware versions prior to v2.2.215, enabling arbitrary code execution through a malicious input that overflows the buffer.

What to do

An attacker could take control of the affected device, potentially compromising sensitive data, altering configurations, or disrupting operations entirely. The implications could be absolutely devastating for any organization relying on this device for remote management. Upgrade your firmware to version v2.2.215 or later immediately to plug this critical vulnerability. Regularly audit your devices and ensure that remote access is secured with strong authentication mechanisms. Don’t leave any doors open! You’ve got this! Stay proactive and secure your systems—be the hero of your network! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01619 · 75.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-05-09T03:56Z
EPSS history
Timeline
  • 09 MAY 03:56Z
    ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow
    cvelistv5