CVE-2025-52082

published 2025-07-15

CVE-2025-52082: In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs…

medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the read_access parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netgear	xr300_firmware	—	—

CWE-121