CVE-2025-11782

Critical

Published: 02/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 version 9.0.2. The 'ShowDownload()' function uses 'sprintf()' to format a string that includes user-controlled input from 'GetParameter(meter)' in a fixed-size buffer 'acStack_4c' (64 bytes) without checking length. An attacker can provide an overly long 'meter' parameter exceeding the buffer size.

Risk Assessment

The risk includes potential remote code execution or system crash, which can disrupt industrial operations and cause operational losses.

Recommendation

It is recommended to apply vendor patches immediately and restrict access to the device management interface to trusted networks only.

Original NVD description (English source)

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'ShowDownload()' function uses “sprintf()” to format a string that includes the user-controlled input of 'GetParameter(meter)' in the fixed-size buffer 'acStack_4c' (64 bytes) without checking the length. An attacker can provide an excessively long value for the 'meter' parameter that exceeds the 64-byte buffer size.