PT-2025-32968

CVE-2025-8760

Published

2025-08-13

Updated

2025-08-18

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: INSTAR 2K+ and 4K version 3.11.1 Build 1124

Description: A buffer overflow issue exists in the fcgi server component due to the manipulation of the Authorization argument within the base64 decode function. This allows for remote exploitation of the issue.

Recommendations: INSTAR 2K+ and 4K version 3.11.1 Build 1124: As a temporary workaround, consider restricting access to the fcgi server component to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Researchers

Michael Imfeld

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')

Related identifiers

CVE-2025-8760