PT-2025-48676 · Circutor · Circutor Sge-Plc1000/Sge-Plc50

Published 2025-12-02 · Updated 2025-12-31 · CVE-2025-11786

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Circutor SGE-PLC1000/SGE-PLC50 version 9.0.2

Description A stack-based buffer overflow exists in the SetUserPassword() function. The newPassword parameter is incorporated into a shell command string using sprintf() without proper sanitisation or validation, and then executed using system(). This allows for the injection and execution of arbitrary shell commands with the same privileges as the application.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the SetUserPassword() function until a patch is available.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-11786

Affected Products

Circutor Sge-Plc1000/Sge-Plc50

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11786 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11786 · Vendor Advisory
• https://twitter.com/SecReportCVE/status/2006367151108632719 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0 · Note
• https://t.me/CVEtracker/38665 · Telegram Post