CVE-2025-4148: Netgear EX6200 sub_503FC buffer overflow
Published May 1, 2025
·Updated
A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function sub503FC. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
3 affected components
Netgear EX6200
All of the following
Netgear Ex6200 Firmware=1.0.3.94
Netgear EX6200
Event History
May 1, 2025
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeakness
Oct 5, 57304
Event
via FIRST·01:58 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-4148?
CVE-2025-4148 is classified as a critical vulnerability.
2
How does CVE-2025-4148 affect the Netgear EX6200?
CVE-2025-4148 affects the function sub_503FC, leading to a potential buffer overflow.
3
Can CVE-2025-4148 be exploited remotely?
Yes, CVE-2025-4148 can be exploited remotely by manipulating the argument host.
4
What versions of Netgear EX6200 are vulnerable to CVE-2025-4148?
The vulnerability is present in Netgear EX6200 version 1.0.3.94.
5
What mitigation strategies exist for CVE-2025-4148?
To mitigate CVE-2025-4148, users should update their Netgear EX6200 to the latest firmware version that addresses this vulnerability.