CVE-2025-6510
Last modified
CVE-2025-6510 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. EPSS estimates a 0.76% chance of exploitation in the next 30 days.
Description
A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. Affected by this issue is the function sub_415EF8. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Ex6100 Firmware | 1.0.2.28_1.1.138 |
References
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgearExploit, Third Party Advisory
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear#pocExploit, Third Party Advisory
- https://vuldb.com/?ctiid.313622Permissions Required, VDB Entry
- https://vuldb.com/?id.313622Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.593678Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.595995Third Party Advisory, VDB Entry
- https://www.netgear.com/Product
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-6510?
How severe is CVE-2025-6510?
How do I fix CVE-2025-6510?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-65094WBCE CMS is a content management system. Prior to version 1.…8.8
- CVE-2025-65095Lookyloo is a web interface that allows users to capture a w…9.4
- CVE-2025-65096RomM (ROM Manager) allows users to scan, enrich, browse and …4.3
- CVE-2025-65097RomM (ROM Manager) allows users to scan, enrich, browse and …6.5
- CVE-2025-65098Typebot is an open-source chatbot builder. In versions prior…7.4
- CVE-2025-65099Claude Code is an agentic coding tool. Prior to version 1.0.…9.8
- CVE-2025-65100Isar is an integration system for automated root filesystem …6.9
- CVE-2025-65102PJSIP is a free and open source multimedia communication lib…8.7
- CVE-2025-65103OpenSTAManager is an open source management software for tec…8.8
- CVE-2025-65104Firebird is an open-source relational database management sy…7.5
- CVE-2025-65105Apptainer is an open source container platform. In Apptainer…5.3
- CVE-2025-65106LangChain is a framework for building agents and LLM-powered…8.3
Are you affected by CVE-2025-6510?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST