CVE-2025-44884

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in FW-WGS-804HPT's web_sys_infoContact_post function could let attackers crash your system with just the right input! 🔥 Think of it like a restaurant where the chef keeps trying to serve more and more dishes without checking if the kitchen can handle the load — eventually, the kitchen overflows with orders and chaos ensues! An attacker could exploit this overflow to cause a denial of service, potentially crashing the application and disrupting operations. The damage doesn't stop there; they could leverage this vulnerability to execute malicious code, leading to complete system compromise. It’s absolutely devastating!

Put simply

Think of it like a restaurant where the chef keeps trying to serve more and more dishes without checking if the kitchen can handle the load — eventually, the kitchen overflows with orders and chaos ensues! The stack overflow occurs when the web_sys_infoContact_post function handles excessive input, causing it to exceed its memory allocation. This flaw could be exploited to control the execution flow of the application.

What to do

An attacker could exploit this overflow to cause a denial of service, potentially crashing the application and disrupting operations. The damage doesn't stop there; they could leverage this vulnerability to execute malicious code, leading to complete system compromise. It’s absolutely devastating! Immediate action is required: update to version 1.306b241111 or later to patch this vulnerability. In addition, review your input validation processes to ensure they can handle unexpected or excessively large inputs. 🛡️ You've got this! With these steps, you'll not only fix this vulnerability but also strengthen your overall security posture! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-05-20T00:00Z
EPSS history
Timeline
  • 20 MAY 00:00Z
    FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function
    cvelistv5