CVE-2025-44891

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in the `host_ip` parameter could spell disaster! This vulnerability in FW-WGS-804HPT v1.305b241111 is a gateway to chaos, with a CVSS score of 9.8. 🔥 Think of it like a restaurant where the kitchen is overloaded with orders. If one chef isn’t careful, they could accidentally mix up all the recipes, leading to a culinary catastrophe! Here, the `host_ip` parameter is that careless chef, overflowing with too many inputs and causing the entire system to crash. An attacker could exploit this vulnerability to execute arbitrary code, potentially taking complete control of the device remotely. With a stack overflow, it’s like giving the keys to the castle to someone who could wreak havoc without anyone noticing—absolutely devastating!

Put simply

Think of it like a restaurant where the kitchen is overloaded with orders. If one chef isn’t careful, they could accidentally mix up all the recipes, leading to a culinary catastrophe! Here, the `host_ip` parameter is that careless chef, overflowing with too many inputs and causing the entire system to crash. This vulnerability arises from improper handling of input in the `web_snmp_v3host_add_post` function, leading to a stack overflow when the `host_ip` parameter is fed excessive data.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially taking complete control of the device remotely. With a stack overflow, it’s like giving the keys to the castle to someone who could wreak havoc without anyone noticing—absolutely devastating! To safeguard your system, patch to the latest version immediately. Ensure input validation is enforced on the `host_ip` parameter and conduct a thorough review of all functions handling user inputs. You've got this! With a few key updates, you'll lock down your system and keep it safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-05-20T00:00Z
EPSS history
Timeline
  • 20 MAY 00:00Z
    FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function
    cvelistv5