CVE-2025-7921CWE-121

ASKEY|modem - Stack-based Buffer Overflow

Critical · published July 21, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

🔥 A stack-based buffer overflow in Askey modems could let unauthenticated attackers take over your network! Think of it like a sneaky intruder getting a hold of the master controls at a concert, allowing them to change the music, mess with the lights, and create chaos on stage. In this case, an attacker could control the modem's execution flow just as easily. If exploited, this vulnerability could allow attackers to execute arbitrary code on the modem, leading to all sorts of havoc — from altering network settings to intercepting sensitive data. Imagine your home network suddenly obeying an unwanted maestro, sending your data into the wrong hands!

Put simply

Think of it like a sneaky intruder getting a hold of the master controls at a concert, allowing them to change the music, mess with the lights, and create chaos on stage. In this case, an attacker could control the modem's execution flow just as easily. This critical vulnerability stems from a stack-based buffer overflow in certain Askey modem models, which allows attackers to manipulate the program’s execution without needing any form of authentication.

What to do

If exploited, this vulnerability could allow attackers to execute arbitrary code on the modem, leading to all sorts of havoc — from altering network settings to intercepting sensitive data. Imagine your home network suddenly obeying an unwanted maestro, sending your data into the wrong hands! Immediate action is crucial: update your modem firmware to the latest version provided by Askey to patch this vulnerability. If you can't apply the update right away, consider temporarily disconnecting the modem from the internet to mitigate potential risks while you prepare for the update. You've got this! Stay proactive, patch that modem, and keep your network safe! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00955 · 61.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-07-21T06:41Z
EPSS history
Timeline
  • 21 JUL 06:41Z
    ASKEY|modem - Stack-based Buffer Overflow
    cvelistv5