← Zuruck zu CVEs
CVE-2025-5875
HIGH8.8
Beschreibung
A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n. Affected is the function sub_69064 of the file /bin/main. The manipulation of the argument text leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE Details
CVSS v3.1 Bewertung8.8
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionNONE
Veroffentlicht6/9/2025
Zuletzt geandert6/23/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
tp-link:tl-ipc544ep-w4tp-link:tl-ipc544ep-w4_firmware
Schwachen (CWE)
CWE-119CWE-120CWE-120
Referenzen
https://locrian-lightning-dc7.notion.site/TL-IPC544EP-W4-1f98e5e2b1a280ae9862d49391d95651(cna@vuldb.com)
https://vuldb.com/?ctiid.311634(cna@vuldb.com)
https://vuldb.com/?id.311634(cna@vuldb.com)
https://vuldb.com/?submit.581366(cna@vuldb.com)
https://www.tp-link.cn/(cna@vuldb.com)
https://locrian-lightning-dc7.notion.site/TL-IPC544EP-W4-1f98e5e2b1a280ae9862d49391d95651(134c704f-9b21-4f2e-91b3-4a467353bcc0)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.