CVE-2025-3714CWE-121

ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

Critical · published May 9, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

🚨 Unauthenticated remote access is just a crafty line of code away! The Stack-based Buffer Overflow in the CL5708IM firmware allows attackers to execute arbitrary code without breaking a sweat. ⚡ Think of it like a restaurant where a diner can slip a note to the chef without anyone noticing, rewriting the entire menu for the night! The potential for chaos is immense when the chef unwittingly takes that note as an order. An attacker could seize control of the device, gaining access to sensitive data or even disrupting operations entirely. With a CVSS score of 9.3, the stakes are high—this could lead to a complete compromise of your network infrastructure!

Put simply

Think of it like a restaurant where a diner can slip a note to the chef without anyone noticing, rewriting the entire menu for the night! The potential for chaos is immense when the chef unwittingly takes that note as an order. This vulnerability stems from improper handling of user input, leading to a Stack-based Buffer Overflow. Unauthenticated attackers can exploit this flaw to run malicious code on the affected device, starting from firmware versions prior to v2.2.215.

What to do

An attacker could seize control of the device, gaining access to sensitive data or even disrupting operations entirely. With a CVSS score of 9.3, the stakes are high—this could lead to a complete compromise of your network infrastructure! Immediate action is a must! Upgrade your firmware to version 2.2.215 or later to patch this critical vulnerability. Additionally, review your network security policies to restrict unauthorized access to KVM switches. You've got this! With these steps, you're on your way to securing your network and solidifying your hero status! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01619 · 75.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-05-09T04:08Z
EPSS history
Timeline
  • 09 MAY 04:08Z
    ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow
    cvelistv5