CVE-2025-44898

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function

Critical · published May 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🔥 A stack overflow in the FW-WGS-804HPT could turn your system into a ticking time bomb, all because of a sneaky misuse of the 'theauthName' parameter! Think of it like trying to fit an oversized piece of luggage into an already packed car—eventually, it’s going to cause a jam, and everything that follows could come crashing down! An attacker could exploit this vulnerability, leading to a complete system crash or arbitrary code execution—this means they could potentially take control of your system and execute any commands they wish. The consequences could be absolutely devastating, jeopardizing sensitive data and disrupting operations.

Put simply

Think of it like trying to fit an oversized piece of luggage into an already packed car—eventually, it’s going to cause a jam, and everything that follows could come crashing down! This stack overflow vulnerability occurs in the web_aaa_loginAuthlistEdit function due to improper handling of the 'theauthName' parameter, allowing attackers to corrupt the call stack.

What to do

An attacker could exploit this vulnerability, leading to a complete system crash or arbitrary code execution—this means they could potentially take control of your system and execute any commands they wish. The consequences could be absolutely devastating, jeopardizing sensitive data and disrupting operations. Immediately update to version 1.306 or newer to patch this vulnerability. Review your system's configurations to ensure that any affected functions are securely coded and implement rigorous input validation practices. Don't wait—this is critical! You've got this! Take these steps, and you'll have your system fortified in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Published
2025-05-20T00:00Z
EPSS history
Timeline
  • 20 MAY 00:00Z
    FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function
    cvelistv5