PT-2025-6388 · Digital China · Dcbi-Netlog-Lab Gateway

Published 2025-02-11 · Updated 2025-02-11 · CVE-2025-25530

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Digital China DCBI-Netlog-LAB Gateway version 1.0

Description The issue is related to a buffer overflow vulnerability due to the lack of length verification when saving parental control configuration information. This can cause the remote target device to crash or execute arbitrary commands.

Recommendations For Digital China DCBI-Netlog-LAB Gateway version 1.0, as a temporary workaround, consider restricting access to the parental control configuration feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-25530

Affected Products

Dcbi-Netlog-Lab Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-25530 · Security Note
• https://gist.github.com/XiaoCurry/570a765f6812b8c53d35f623ee701b19 · Note
• https://twitter.com/CVEnew/status/1889398090303504651 · Twitter Post
• https://t.me/cvedetector/17759 · Telegram Post