CVE-2025-55847: Buffer Overflow

Published Sep 26, 2025

Updated

Wavlink M86X3AV240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerability arises because the Cookie parameter does not properly validate the length of input data. Attackers can exploit this to execute arbitrary code or cause a denial of service (DoS) on the system

Affected Software

3 affected components

Wavlink M86X3A

All of the following

Wavlink Wl-wn586x3a Firmware=m86x3a_v240730

Wavlink Wl-wn586x3a

Event History

Sep 26, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-55847?

CVE-2025-55847 is rated as a high-severity vulnerability due to its potential to allow remote code execution.

How can I fix CVE-2025-55847?

To mitigate CVE-2025-55847, update your Wavlink M86X3A device to the latest firmware version that addresses the buffer overflow issue.

What are the consequences of exploiting CVE-2025-55847?

Exploiting CVE-2025-55847 can lead to arbitrary code execution or a denial of service condition on the affected device.

What systems are affected by CVE-2025-55847?

The Wavlink M86X3A model is specifically affected by CVE-2025-55847.

Is there a workaround for CVE-2025-55847?

A temporary workaround for CVE-2025-55847 may include disabling the affected CGI scripts until a patch is available.