CVE-2021-25328

Name of the Vulnerable Software and Affected Versions: Skyworth Digital Technology RN510 version 3.1.0.4

Description: The issue is related to a buffer overflow in the /cgi-bin/app-staticIP.asp endpoint. An authenticated attacker can send a specially crafted request to this endpoint, potentially leading to a denial of service (DoS) or possible code execution on the device.

Recommendations: For Skyworth Digital Technology RN510 version 3.1.0.4, as a temporary workaround, consider restricting access to the /cgi-bin/app-staticIP.asp endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.