CVE-2025-25527
Last modified
CVE-2025-25527 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ruijie | Rg-Nbr2600s Firmware | 10.3\(4b12\) |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-25527?
How severe is CVE-2025-25527?
How do I fix CVE-2025-25527?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-25521Seacms <=13.3 is vulnerable to SQL Injection in admin_type_n…9.8
- CVE-2025-25522Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002…7.3
- CVE-2025-25523Buffer overflow vulnerability in Trendnet TEG-40128 Web Smar…5.9
- CVE-2025-25524Buffer overflow vulnerability in TOTOLink X6000R routers V9.…5.1
- CVE-2025-25525Buffer overflow vulnerability in H3C FA3010L access points S…5.1
- CVE-2025-25526Buffer overflow vulnerability in Mercury MIPC552W Camera v1.…5.1
- CVE-2025-25528Multiple buffer overflow vulnerabilities in Wavlink WL-WN575…5.1
- CVE-2025-25529Buffer overflow vulnerability in Digital China DCBC Gateway …5.1
- CVE-2025-2553A vulnerability was found in D-Link DIR-618 and DIR-605L 2.0…5.3
- CVE-2025-25530Buffer overflow vulnerability in Digital China DCBI-Netlog-L…9.8
- CVE-2025-25535HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 a…9.8
- CVE-2025-25539Local File Inclusion vulnerability in Vasco v3.14and before …6.5
Are you affected by CVE-2025-25527?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST