PT-2025-21245 · Unknown · Ws-Wn572Hp3

Published 2025-05-14 · Updated 2025-05-17 · CVE-2025-44879

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: WS-WN572HP3 version V230525

Description: A buffer overflow was discovered in the component /www/cgi-bin/upload.cgi, allowing attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Recommendations: For WS-WN572HP3 version V230525, as a temporary workaround, consider disabling the /www/cgi-bin/upload.cgi component until a patch is available. Restrict access to this component to minimize the risk of exploitation. Avoid using the upload functionality in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-44879

Affected Products

Ws-Wn572Hp3

References · 6

• 🔥 https://lafdrew.github.io/2025/03/17/Buffer%20Overflow%20in%20upload.cgi%20of%20WINSTAR_WN572HP3%20Device · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-44879 · Security Note
• https://t.me/cvetracker/23866 · Telegram Post
• https://twitter.com/SecAideInfo/status/1923683486009000196 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1922789819798769850 · Twitter Post
• https://twitter.com/CVEnew/status/1922765627300904976 · Twitter Post