CVE-2025-44883

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 An unexpected stack overflow has been found in FW-WGS-804HPT v1.305b241111 via the tacIp parameter — a single wrong input could bring the whole system crashing down! 🔥 Think of it like a restaurant where one wrong order causes a chain reaction, leading to the entire kitchen being overwhelmed and the whole service grinding to a halt. This flaw lets attackers inject malicious data that could cause the server to malfunction spectacularly! If exploited, this stack overflow vulnerability could allow an attacker to crash the system or potentially execute arbitrary code, leaving critical functions unavailable and your data at risk. Imagine the chaos when no one can access essential services!

Put simply

Think of it like a restaurant where one wrong order causes a chain reaction, leading to the entire kitchen being overwhelmed and the whole service grinding to a halt. This flaw lets attackers inject malicious data that could cause the server to malfunction spectacularly! This vulnerability occurs in the web_tacplus_serverEdit_post function, where it fails to properly handle input from the tacIp parameter, leading to a stack overflow condition. An attacker could exploit this flaw by sending specially crafted data that exceeds the buffer capacity.

What to do

If exploited, this stack overflow vulnerability could allow an attacker to crash the system or potentially execute arbitrary code, leaving critical functions unavailable and your data at risk. Imagine the chaos when no one can access essential services! Immediate action is crucial! Update your system to the patched version as soon as possible to eliminate this vulnerability. Regularly audit your inputs to ensure they are being validated properly to prevent similar issues in the future. Keep your security measures tight! You've got this! With quick action, you can secure your system and maintain your superhero status in security! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-05-20T00:00Z
EPSS history
Timeline
  • 20 MAY 00:00Z
    FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function
    cvelistv5