Stack Overflow Vulnerability in RE11S by Edimax
CVE-2025-22904

9.8CRITICAL

Key Information:

Vendor

Edimax

Status
RE11S
Vendor
CVE Published:
16 January 2025

What is CVE-2025-22904?

The RE11S v1.11 device by Edimax has been identified to have a stack overflow vulnerability, which can be exploited through the pptpUserName parameter in the setWAN function. This flaw may lead to unauthorized access or potential system instability if not remediated promptly. Users are advised to review their device configurations and apply security updates as recommended to mitigate the risks associated with this vulnerability.

References

https://www.edimax.com/edimax/global/
http://re11s.com
https://github.com/xyqer1/RE11S_1.11-setWAN-3-StackOverflow

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.