CVE-2025-4141

CWE-119 — Buffer Overflow CWE-120 — Classic Buffer Overflow CWE-122 — Heap-based Buffer Overflow4 documents4 sources

Severity

8.7HIGH

EPSS

1.2%

top 20.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Netgear Ex6200 Netgear Ex6200 Firmware

Timeline

PublishedApr 30

Latest updateMay 1

Description

A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. This affects the function sub_3C03C. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5netgear/ex62001.0.3.94

▶NVDnetgear/ex6200_firmware1.0.3.94

🔴Vulnerability Details

GHSA

GHSA-pqpc-g4m5-385m: A vulnerability, which was classified as critical, was found in Netgear EX6200 1↗2025-05-01

▶

CVEList

Netgear EX6200 sub_3C03C buffer overflow↗2025-04-30

▶

📋Vendor Advisories

Microsoft

Heap-based Buffer Overflow in vim/vim↗2022-11-08

▶