CVE Feed

    Dashboard / CVE / CVE-2025-25528

    CVE-2025-25528

    Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data. By successfully exploiting the vulnerabilities, attackers can crash the remote devices or execute arbitrary commands without any authorization verification.

    Published:Feb 11, 2025
    Last Modified:Oct 7, 2025
    EPS:Feb 11, 2025
    EPSS Score:0.00067
    CVSS Score:5.1

    Affected Products

    Vendor
    Wavlink
    Product
    Wl-wn575a3
    Vendor
    Wavlink
    Product
    Wl-wn575a3 Firmware

    Exploits

    https://gist.github.com/XiaoCurry/87f3a4412c46fa9c27d2f723136920b8

    Related CVEs

    CVE-2023-38861 (CVSS 9.8) — An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via us…
    CVE-2022-37149 (CVSS 9.8) — WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when opera…
    CVE-2022-34592 (CVSS 9.8) — Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the fu…
    CVE-2020-10971 (CVSS 8.8) — An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that …
    CVE-2020-10974 (CVSS 7.5) — An issue was discovered affecting a backup feature where a crafted POST request returns the current configurat…
    CVE-2020-12266 (CVSS 7.5) — An issue was discovered where there are multiple externally accessible pages that do not require any sort of a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High