CVE-2025-45029

MediumCVSS 6.5

Published: 02/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

A heap overflow vulnerability was discovered in WINSTAR WN572HP3 v230525 via the CONTENT_LENGTH variable in /cgi-bin/upload.cgi.

An attacker can remotely crash the device or potentially execute arbitrary code, compromising system integrity and availability.

Immediately update the firmware to the latest version and restrict access to the management interface to trusted networks only.

Original NVD description (English source)

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENT_LENGTH variable at /cgi-bin/upload.cgi.