CVE-2025-4140

CWE-119 — Buffer Overflow CWE-120 — Classic Buffer Overflow4 documents4 sources

Severity

8.7HIGH

EPSS

1.2%

top 20.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Netgear Ex6120 Netgear Ex6120 Firmware

Timeline

PublishedApr 30

Latest updateOct 15

Description

A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94. Affected by this issue is the function sub_30394. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5netgear/ex61201.0.3.94

▶NVDnetgear/ex6120_firmware1.0.3.94

🔴Vulnerability Details

GHSA

GHSA-mf3m-m2fx-pq76: A vulnerability, which was classified as critical, has been found in Netgear EX6120 1↗2025-05-01

▶

CVEList

Netgear EX6120 sub_30394 buffer overflow↗2025-04-30

▶

📋Vendor Advisories

Oracle

Oracle Oracle Siebel CRM Risk Matrix: Keyword Automation (Email-MIME) — CVE-2024-4140↗2025-10-15

▶