EUVD-2026-80063
GHSA-rv5x-73pq-5q9f
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable CGI handler with no user interaction, but exploitation requires valid admin credentials (PR:L), matching the supplied 4.0 vector's PR:L.
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
Lifecycle Timeline
2DescriptionCVE.org
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory.
AnalysisAI
Stack-based buffer overflow in the wake_up_set.cgi endpoint of Netcore NR255-V firmware version 1.5.130703 lets an attacker who can reach the router's web management interface corrupt memory by submitting oversized MAC and ID parameter values that are tokenized without any length bound. Successful exploitation yields high confidentiality, integrity, and availability impact on the device - potentially full compromise of the router as a network chokepoint - with a CVSS 4.0 base score of 8.7 (AV:N/AC:L/AT:N/PR:L/UI:N). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must be able to send HTTP requests to the NR255-V web management interface and must already hold valid credentials for it - the CVSS 4.0 vector specifies PR:L, so this is an authenticated, not pre-auth, flaw, and the wake_up_set.cgi (Wake-on-LAN configuration) endpoint must be reachable, which in the default deployment is the LAN-side management interface and only reachable over WAN if remote administration has been enabled. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector is internally consistent with a network-reachable, low-complexity, no-user-interaction overflow: AV:N/AC:L/AT:N/PR:L/UI:N with full VC/VI/VA impact and no subsequent-system scope change, giving 8.7. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch is identified at time of analysis - the supplied references are third-party research and a VulnCheck advisory, not a Netcore firmware release, so the first action is to contact Netcore support and request a fixed firmware build for the NR255-V beyond 1.5.130703. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today