RE11S vulnerabilities
6 known CVE vulnerabilities in RE11S, translated and rated.
- CVE-2025-22916Critical
A stack overflow vulnerability was discovered in RE11S v1.11 via the pppUserName parameter in the formPPPoESetup function.
- CVE-2025-22912Critical
A command injection vulnerability was discovered in RE11S firmware version v1.11 within the /goform/formAccept component. An attacker can remotely execute arbitrary system commands.
- CVE-2025-22907Critical
A stack overflow vulnerability was discovered in RE11S v1.11 in the formWlSiteSurvey function via the selSSID parameter.
- CVE-2025-22906Critical
A command injection vulnerability was discovered in RE11S v1.11 via the L2TPUserName parameter at /goform/setWAN. An attacker can remotely execute arbitrary system commands.
- CVE-2025-22905Critical
A command injection vulnerability was discovered in RE11S v1.11 via the command parameter at /goform/mp. An attacker can remotely execute arbitrary system commands.
- CVE-2025-22904Critical
A stack overflow vulnerability was discovered in RE11S v1.11 via the pptpUserName parameter in the setWAN function. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.