CVE-2025-44897

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow in FW-WGS-804HPT could turn your upgrade routine into a digital disaster! 🔥 Think of this like a crowded elevator. When too many people squeeze in, things get messy, and the elevator can malfunction. Here, the bytftp_srvip parameter is like the door, allowing too much input, leading to potential chaos. An attacker can exploit this vulnerability to crash the system or execute arbitrary code, potentially gaining complete control over the device. This could lead to data breaches, service interruptions, and, once compromised, they could wreak havoc on the entire network!

Put simply

Think of this like a crowded elevator. When too many people squeeze in, things get messy, and the elevator can malfunction. Here, the bytftp_srvip parameter is like the door, allowing too much input, leading to potential chaos. This stack overflow vulnerability in the web_tool_upgradeManager_post function arises when the size of input exceeds the buffer capacity, allowing attackers to manipulate stack memory and execute malicious code.

What to do

An attacker can exploit this vulnerability to crash the system or execute arbitrary code, potentially gaining complete control over the device. This could lead to data breaches, service interruptions, and, once compromised, they could wreak havoc on the entire network! Update to version 1.305b241112 or higher immediately to patch this vulnerability. Additionally, review your code to ensure proper input validation and buffer management to prevent similar issues in the future. You've got this! Follow these steps and protect your systems from chaos. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-05-20T00:00Z
EPSS history
Timeline
  • 20 MAY 00:00Z
    FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function
    cvelistv5