CVE-2025-44886

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🔥 A sneaky stack overflow lurks in FW-WGS-804HPT v1.305b241111, hiding in the byruleEditName parameter! Think of it like a crowded elevator that suddenly overloads — when too many people push their way in, everything collapses. This stack overflow lets an attacker inject excessive data that can overflow the application's memory, leading to serious issues. An attacker could exploit this vulnerability to crash the application, gain control over execution flow, or even execute arbitrary code. The implications are absolutely devastating, potentially compromising the entire system and its data integrity. Yikes!

Put simply

Think of it like a crowded elevator that suddenly overloads — when too many people push their way in, everything collapses. This stack overflow lets an attacker inject excessive data that can overflow the application's memory, leading to serious issues. This stack overflow vulnerability occurs in the web_acl_mgmt_Rules_Edit_postcontains function when the byruleEditName parameter is manipulated. It allows attackers to send inputs that exceed the buffer size, causing the application to behave unexpectedly.

What to do

An attacker could exploit this vulnerability to crash the application, gain control over execution flow, or even execute arbitrary code. The implications are absolutely devastating, potentially compromising the entire system and its data integrity. Yikes! Immediately patch FW-WGS-804HPT to the latest version to fix this critical vulnerability. Review input validation measures for all parameters to ensure they adhere to size limits and prevent overflow. Regularly audit your systems for similar issues and implement best coding practices. You've got this! Follow these steps, and you’ll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-05-20T00:00Z
EPSS history
Timeline
  • 20 MAY 00:00Z
    FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function
    cvelistv5