EUVD-2026-80033
GHSA-hj8p-w4gv-7pjf
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable CGI handler but PR:L per the supplied vector, since reaching the tcpdump diagnostic endpoint requires authenticated management access; full C/I/A impact from code execution.
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
Lifecycle Timeline
2DescriptionCVE.org
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code.
AnalysisAI
A stack-based buffer overflow in the Netcore NR255-V router (firmware 1.5.130703) allows an attacker who can reach the web management interface to smash a fixed-size stack buffer by submitting oversized form values to the ntools_tcpdump_start_set.cgi endpoint, which passes input to an unsized sprintf call. Successful exploitation can corrupt the saved return address and potentially lead to arbitrary code execution with the privileges of the CGI process on the device. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete preconditions. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The headline CVSS 4.0 base score of 8.7 is driven by AV:N/AC:L and full VC/VI/VA impact, which would normally place this in urgent-patch territory. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch was identified in the supplied intelligence at time of analysis, so the first action is to contact Netcore support and request a fixed firmware build for the NR255-V, then upgrade once a version number is confirmed rather than assuming 1.5.130703 is the only affected release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today