CVE-2025-11779

CVE-2025-11779 affects Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. A stack-based buffer overflow in the SetLan function is triggered when applying a new configuration via the management web interface (index.cgi). Un-sanitised configuration parameters can lead to command injection. Publicly referenced ...

CIRCUTOR SGE-PLC1000和CIRCUTOR SGE-PLC50 安全漏洞

The CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 are both a network concentrator from CIRCUTOR Spain. A security vulnerability exists in the CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 version v9.0.2, which stems from an uncleared parameter in the SetLan function and could lead to command injectio...

The vulnerability of the setLan() function in the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the setLan function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output goes beyond the buffer in memory when processing the lan2enabled parameter. Exploiting this vulnerability allows a...