CVE Catalog
CVE-2025-41730
CriticalSummary
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
Risk Assessment
An unauthenticated attacker can fully compromise the device, potentially leading to integrity and availability breaches and enabling further network attacks.
Recommendation
Apply vendor patches immediately and restrict device access from external networks.
Original NVD description (English source)
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.