Vulnerability · Published Jun 23, 2025 · Assigned by VulDB
CVE-2025-6510Netgear EX6100 sub_415EF8 stack-based overflow
High 8.8
In plain English
A high-severity stack buffer overflow in EX6100 from Netgear. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Official description
A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. Affected by this issue is the function sub_415EF8. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products (as reported)
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C
References
- VDB-313622 | Netgear EX6100 sub_415EF8 stack-based overflow vdb-entry, technical-description
- VDB-313622 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #593678 | Netgear EX6100 V1.0.2.28_1.1.138 Stack-based Buffer Overflow third-party-advisory
- Submit #595995 | netgear EX6100 V1.0.2.28_1.1.138 Stack-based Buffer Overflow (Duplicate) third-party-advisory
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear related
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear#poc exploit
- https://www.netgear.com/ product