PT-2025-22358 · Unknown · Fw-Wgs-804Hpt

John Doe

·

CVE-2025-44895

·

Published

2025-04-18

·

Updated

2025-12-27

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions FW-WGS-804HPT version 1.305b241111
Description A stack overflow issue was discovered in the web acl ipv4BasedAceAdd function via the ipv4Aclkey parameter.
Recommendations For FW-WGS-804HPT version 1.305b241111, as a temporary workaround, consider restricting access to the web acl ipv4BasedAceAdd function until a patch is available. Avoid using the ipv4Aclkey parameter in the affected function to minimize the risk of exploitation.

Exploit

Fix

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-05953
CVE-2025-44895

Affected Products

Fw-Wgs-804Hpt