PT-2025-22294 · Unknown · Fw-Wgs-804Hpt

John Doe · Published 2025-04-20 · Updated 2025-11-24 · CVE-2025-44893

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PLANET Technology FW-WGS-804HPT version 1.305b241111

Description The vulnerability concerns a stack overflow in the web acl mgmt Rules Apply post function when processing the ruleNamekey parameter. Exploitation may allow a remote attacker to impact the confidentiality, integrity, and availability of information. The issue affects devices running the vulnerable software. The vulnerable parameter is ruleNamekey and the affected function is web acl mgmt Rules Apply post.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the web acl mgmt Rules Apply post function until a patch is available.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-05944

CVE-2025-44893

Affected Products

Fw-Wgs-804Hpt

References · 10

• 🔥 https://lafdrew.github.io/2025/04/20/web-acl-mgmt-Rules-Apply-post-ruleName · Exploit
• https://bdu.fstec.ru/vul/2025-05944 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44893 · Security Note
• https://t.me/cvetracker/24341 · Telegram Post
• https://raw.githubusercontent.com/lafdrew/lafdrew.github.io/7e2c4ab83017611974e61aa1384c2563ec008f49/2025/04/18/web-aaa-loginAuthlistEdit-get-authName-StackOverflow/index.html · Note
• https://twitter.com/VulmonFeeds/status/1925043172347916495 · Twitter Post
• https://github.com/xyqer1/Planet-web_acl_mgmt_Rules_Apply_post-ruleName-StackOverflow · Note
• https://t.me/cveNotify/143782 · Telegram Post
• https://twitter.com/CVEnew/status/1924928789273858293 · Twitter Post