Vulnerability · Published May 9, 2025 · Assigned by twcert
CVE-2025-3711ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow
Critical 9.8
In plain English
A critical-severity stack buffer overflow in CL5708IM from ATEN. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.6%top 23.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.twcert.org.tw/tw/cp-132-10096-60a81-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10104-63bf4-2.html third-party-advisory