PT-2025-27632 · Winstar · Winstar Wn572Hp3

Wei · Published 2025-07-02 · Updated 2025-07-02 · CVE-2025-45029

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WINSTAR WN572HP3 version v230525

Description: A heap overflow issue was discovered via the CONTENT LENGTH variable at the "/cgi-bin/upload.cgi" API endpoint.

Recommendations: For WINSTAR WN572HP3 version v230525, consider disabling access to the "/cgi-bin/upload.cgi" API endpoint until a patch is available to prevent exploitation of the heap overflow issue. Avoid using the CONTENT LENGTH variable in the affected API endpoint until the issue is resolved.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-45029

Affected Products

Winstar Wn572Hp3

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-45029 · Security Note
• http://winstar.com · Note
• http://wn572hp3.com · Note
• https://twitter.com/CVEnew/status/1940414196199415967 · Twitter Post
• https://yiweibu.github.io/2025/03/19/WINSTAR_WN572HP3 · Note