CVE-2025-11789

Name of the Vulnerable Software and Affected Versions Circutor SGE-PLC1000/SGE-PLC50 version 9.0.2

Description An out-of-bounds read issue exists in Circutor SGE-PLC1000/SGE-PLC50 version 9.0.2. The DownloadFile function uses the atoi() function to convert a parameter to an integer, which is then used as an index into the FilesDownload array using (&FilesDownload)[iVar2]. Providing a parameter that results in a large integer value leads to memory access beyond the array boundaries.

Recommendations Update to a newer version of Circutor SGE-PLC1000/SGE-PLC50 to address this issue.