Stack-based Buffer Overflow in Kenwood DMX958XR Product by Vendor Kenwood
CVE-2025-8653

8.8HIGH

Key Information:

Vendor

Kenwood

Status
Dmx958xr
Vendor
CVE Published:
6 August 2025

What is CVE-2025-8653?

The Kenwood DMX958XR features a vulnerability within the JKRadioService that can be exploited by network-adjacent attackers. This vulnerability is caused by insufficient validation of user-supplied data lengths before copying them into a fixed-length stack-based buffer. As a result, an attacker can execute arbitrary code, potentially gaining root access on the affected device without requiring authentication. Users are advised to take precautions to mitigate this risk, as exploitation could lead to severe consequences.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DMX958XR 1.0.0509.3100

References

https://www.zerodayinitiative.com/advisories/ZDI-25-801/
x_research-advisory

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.