CVE-2025-11784

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowMeterDatabase()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.

• CWE-121

• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0Third Party Advisory

Published

Dec 2, 2025

Last Modified

Sep 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11779Stack-based buffer overflow vulnerability in CircutorSGE-PLC…9.8
• CVE-2025-1178A vulnerability was found in GNU Binutils 2.43. It has been …6.3
• CVE-2025-11780Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11781Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/…7.8
• CVE-2025-11782Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11783Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11785Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11786Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11787Command injection vulnerability in the operating system in C…8.8
• CVE-2025-11788Heap-based buffer overflow vulnerability in Circutor SGE-PLC…9.8
• CVE-2025-11789Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE…7.5
• CVE-2025-1179A vulnerability was found in GNU Binutils 2.43. It has been …7.5