CVE-2025-6565 - Netgear WNCE3001 HTTP POST Request http_d stack-based overflow

Back Back to CVE browser

HIGH

Netgear WNCE3001 HTTP POST Request http_d stack-based overflow

Published Jun 24, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.89%

Description

A vulnerability was found in Netgear WNCE3001 1.0.0.50. It has been classified as critical. This affects the function http_d of the component HTTP POST Request Handler. The manipulation of the argument Host leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor NETGEAR Product WNCE3001 Default
n/a
- Version
  1.0.0.50
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NETGEAR

WNCE3001

n/a

Version	Status	Constraints
1.0.0.50	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19007
Advisory
https://github.com/xiaobor123/vul-finds/tree/main/vul-find-wnce3001-netgear
related
https://github.com/xiaobor123/vul-finds/tree/main/vul-find-wnce3001-netgear#poc
exploit
https://vuldb.com/?ctiid.313737
signaturepermissions-required
https://vuldb.com/?id.313737
vdb-entrytechnical-description
https://vuldb.com/?submit.590030
third-party-advisory
https://www.netgear.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19007		Advisory
https://github.com/xiaobor123/vul-finds/tree/main/vul-find-wnce3001-netgear		related
https://github.com/xiaobor123/vul-finds/tree/main/vul-find-wnce3001-netgear#poc		exploit
https://vuldb.com/?ctiid.313737		signaturepermissions-required
https://vuldb.com/?id.313737		vdb-entrytechnical-description
https://vuldb.com/?submit.590030		third-party-advisory
https://www.netgear.com/		product