PT-2025-43010 · Ltq-Ptm+3 · Ltq-Ptm+5

Published 2025-10-21 · Updated 2026-01-11 · CVE-2025-62525

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenWrt versions prior to 24.10.4

Description OpenWrt is a Linux operating system designed for embedded devices. A flaw exists in the ltq-ptm driver, which manages the data path for DSL lines. Prior to version 24.10.4, local users can read and write to arbitrary kernel memory using the driver’s ioctls. This impacts the lantiq target supporting xrx200, danube, and amazon SoCs from Lantiq/Intel/MaxLinear when using DSL in PTM mode. The VRX518 DSL driver and ATM mode are not affected. The issue could allow attackers to escape sandboxes or other containers.

Recommendations Versions prior to 24.10.4 should be updated to version 24.10.4 or later.

Exploit

Fix

Out of bounds Read

Memory Corruption

RCE

Weakness Enumeration

CWE-125

CWE-787

CWE-20

Related Identifiers

BDU:2025-15978

CVE-2025-62525

GHSA-H427-FRPR-7CQR

Affected Products

Openwrt

Vrx518

Amazon

Danube

Ltq-Ptm

Xrx200

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62525.json · Exploit
• https://github.com/openwrt/openwrt/commit/2a76abc5442e3f74d95b4caa9bb57e5488fc132e · Patch
• https://github.com/openwrt/openwrt/security/advisories/GHSA-h427-frpr-7cqr · Vendor Advisory
• https://github.com/openwrt/openwrt/commit/e001b31163a77683ee741d169f794cfa50926f37 · Patch
• https://osv.dev/vulnerability/CVE-2025-62525 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-62525 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15978 · Security Note
• https://openwrt.org/advisory/2025-10-22-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62525 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-62525 · Security Note
• https://ubuntu.com/security/CVE-2025-62525 · Vendor Advisory
• https://twitter.com/YorickReintjens/status/1980709223089729614 · Twitter Post
• https://feedly.com/cve/CVE-2025-62525 · Note
• https://twitter.com/CVEnew/status/1981046813101871349 · Twitter Post
• https://t.me/securixy_kz/1285 · Telegram Post