PT-2025-10025 · Manageengine · Zoho Manageengine Adselfservice Plus

Xiaobor123 · Published 2025-03-06 · Updated 2025-07-16 · CVE-2025-6510

Positive Technologies · (AI Summary)

CVSS v2.0

9.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

**Name of the Vulnerable Software and Affected Versions:**

Netgear EX6100 version 1.0.2.28 1.1.138

**Description:**

A critical vulnerability exists in the Netgear EX6100, specifically within the `sub 415EF8` function. This issue leads to a stack-based buffer overflow, potentially allowing remote attackers to execute arbitrary code by sending a specially crafted GET request. The exploit for this vulnerability has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

**Recommendations:**

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

BDU:2025-07581

CVE-2025-6510

Affected Products

Zoho Manageengine Adselfservice Plus

References · 19

• 🔥 https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear · Exploit
• 🔥 https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear#poc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6510 · Security Note
• https://bdu.fstec.ru/vul/2025-07581 · Security Note
• https://vuldb.com/?id.313622 · Note
• https://github.com/advisories/GHSA-xhmc-52r9-p6jh · Note
• https://vuldb.com/?ctiid.313622 · Note
• https://twitter.com/attritionorg/status/1899910754859626564 · Twitter Post
• https://vuldb.com/?submit.593678 · Note
• https://t.me/cvetracker/26854 · Telegram Post
• https://t.me/cvenotify/129202 · Telegram Post
• https://t.me/latest_high_impact_cve/2785 · Telegram Post
• https://t.me/cvenotify/128969 · Telegram Post
• https://twitter.com/CVEnew/status/1937191635210907736 · Twitter Post
• https://twitter.com/GradientCyber/status/1897757038198837265 · Twitter Post