CVE-2025-62691CWE-121

CVE-2025-62691

Critical · published November 25, 2025

CVSS v3.0
9.8
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

🚨 A sneaky stack-based buffer overflow is hiding in the Security Point of MaLion and MaLionCloud! Just one deceptive HTTP request from an unauthenticated attacker could grant them SYSTEM privileges. 🔥 Think of it like a restaurant that serves meals but doesn't check your identity before letting you into the kitchen. Once inside, a clever intruder can whip up anything they want, from tampering with your recipes to ruining the whole dining experience. If exploited, this vulnerability allows an attacker to execute arbitrary code with full SYSTEM privileges. This means they could take control of your system, access sensitive data, and wreak havoc—an absolutely devastating scenario for any organization relying on this software!

Put simply

Think of it like a restaurant that serves meals but doesn't check your identity before letting you into the kitchen. Once inside, a clever intruder can whip up anything they want, from tampering with your recipes to ruining the whole dining experience. This vulnerability occurs due to improper handling of HTTP headers, leading to a stack-based buffer overflow. An attacker can send a specially crafted request that triggers this overflow and executes arbitrary code.

What to do

If exploited, this vulnerability allows an attacker to execute arbitrary code with full SYSTEM privileges. This means they could take control of your system, access sensitive data, and wreak havoc—an absolutely devastating scenario for any organization relying on this software! To protect your systems, update MaLion and MaLionCloud to the latest patched version immediately. Additionally, consider implementing network security measures to filter incoming HTTP requests and monitor your logs for any unusual activity. 🛡️ You’ve got this! By taking these steps, you’ll secure your systems against this threat in no time! 💪✨

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00678 · 51.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-11-25T13:15Z
References (2)
EPSS history
Timeline
  • 25 NOV 07:21Z
    Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers
    cvelistv5