PT-2026-26915 · Unknown · Realterm: Serial Terminal

Alejandra Sánchez · Published 2026-03-21 · Updated 2026-03-21 · CVE-2019-25570

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RealTerm Serial Terminal version 2.0.0.70

Description A denial of service issue exists in RealTerm Serial Terminal version 2.0.0.70 that allows local attackers to crash the application. This occurs by providing an excessively long string in the Port field. Specifically, pasting a buffer of 1000 characters into the Port input field and clicking the open button triggers the crash. The affected API endpoint is the port opening function.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid entering excessively long strings (over 1000 characters) into the Port field.

Exploit

Fix

Weakness Enumeration

CWE-1260

Related Identifiers

CVE-2019-25570

Affected Products

Realterm: Serial Terminal

References · 5

• 🔥 https://exploit-db.com/exploits/46390 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25570 · Security Note
• https://sourceforge.net/projects/realterm/files · Note
• https://vulncheck.com/advisories/realterm-serial-terminal-denial-of-service-via-port-field · Note
• https://realterm.sourceforge.io · Note