CVE-2025-41426CWE-121

Vertiv Liebert RDU101 and UNITY Stack-based Buffer Overflow

Critical · published May 21, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow lurking in Vertiv products could allow attackers to run their own code — like a thief sneaking their way into a building by manipulating the security system! 🔥 Think of this vulnerability as a hotel with a faulty security system allowing intruders to bypass their room access controls. An attacker can craft a specific request to overflow the system's memory and gain unauthorized entry, potentially taking control of the entire device. If exploited, this vulnerability opens the door to absolute chaos! An attacker could execute malicious code, leading to unauthorized access, data theft, or even total system failure. The implications are absolutely devastating for operational integrity and security.

Put simply

Think of this vulnerability as a hotel with a faulty security system allowing intruders to bypass their room access controls. An attacker can craft a specific request to overflow the system's memory and gain unauthorized entry, potentially taking control of the entire device. This stack-based buffer overflow in affected Vertiv devices can be triggered by sending specially crafted input, causing memory corruption that enables code execution. Essentially, it allows for arbitrary commands to be run on the device, bypassing normal security measures.

What to do

If exploited, this vulnerability opens the door to absolute chaos! An attacker could execute malicious code, leading to unauthorized access, data theft, or even total system failure. The implications are absolutely devastating for operational integrity and security. Immediate action is crucial! Ensure that you apply the latest firmware updates provided by Vertiv to mitigate this vulnerability. Additionally, review your security settings and consider implementing intrusion detection systems for added protection. You've got this! By following these steps, you can secure your systems and maintain your hero status in the fight against vulnerabilities! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00778 · 55.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-05-21T19:22Z
EPSS history
Timeline
  • 21 MAY 19:22Z
    Vertiv Liebert RDU101 and UNITY Stack-based Buffer Overflow
    cvelistv5