CVE-2025-25529
Last modified
CVE-2025-25529 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-25529?
How severe is CVE-2025-25529?
How do I fix CVE-2025-25529?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-25523Buffer overflow vulnerability in Trendnet TEG-40128 Web Smar…5.9
- CVE-2025-25524Buffer overflow vulnerability in TOTOLink X6000R routers V9.…5.1
- CVE-2025-25525Buffer overflow vulnerability in H3C FA3010L access points S…5.1
- CVE-2025-25526Buffer overflow vulnerability in Mercury MIPC552W Camera v1.…5.1
- CVE-2025-25527Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway …5.1
- CVE-2025-25528Multiple buffer overflow vulnerabilities in Wavlink WL-WN575…5.1
- CVE-2025-2553A vulnerability was found in D-Link DIR-618 and DIR-605L 2.0…5.3
- CVE-2025-25530Buffer overflow vulnerability in Digital China DCBI-Netlog-L…9.8
- CVE-2025-25535HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 a…9.8
- CVE-2025-25539Local File Inclusion vulnerability in Vasco v3.14and before …6.5
- CVE-2025-2555A vulnerability classified as problematic has been found in …2.9
- CVE-2025-2556A vulnerability classified as problematic was found in Audi …5.3
Are you affected by CVE-2025-25529?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST