Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Name/schedule leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321063 - https://vuldb.com/?ctiid.321063 - https://vuldb.com/?submit.631532 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_28/28.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_28/28.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9361 State: PUBLISHED Published: 2025-08-23T12:02:06.669Z Last Updated: 2025-08-25T18:05:48.015Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The affected element is the function ipRangeBlockManageRule of the file /goform/ipRangeBlockManageRule. Performing manipulation of the argument ipRangeBlockRuleName/scheduleIp/ipRangeBlockRuleIpAddr results in stack-based buffer overflow. The attack ma
he argument ipRangeBlockRuleName/scheduleIp/ipRangeBlockRuleIpAddr results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321064 - https://vuldb.com/?ctiid.321064 - https://vuldb.com/?submit.631533 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_29/29.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_29/29.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9362 State: PUBLISHED Published: 2025-08-23T13:32:06.431Z Last Updated: 2025-08-25T18:04:58.391Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function urlFilterManageRule of the file /goform/urlFilterManageRule. Executing manipulation of the argument urlFilterRuleName/scheduleUrl/addURLFilter can lead to stack-based buffer overflow. The attack may be launched remotely.
rlFilterRuleName/scheduleUrl/addURLFilter can lead to stack-based buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321065 - https://vuldb.com/?ctiid.321065 - https://vuldb.com/?submit.631534 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_30/30.md - https://www.linksys.com/
CVE ID: CVE-2025-9363 State: PUBLISHED Published: 2025-08-23T14:02:06.316Z Last Updated: 2025-08-25T18:04:05.215Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function portTriggerManageRule of the file /goform/portTriggerManageRule. The manipulation of the argument triggerRuleName/schedule leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has
rRuleName/schedule leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321066 - https://vuldb.com/?ctiid.321066 - https://vuldb.com/?submit.631535 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_31/31.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_31/31.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9364 State: PUBLISHED Published: 2025-09-09T12:41:23.124Z Last Updated: 2025-09-09T13:36:31.291Z Vendors: Rockwell Automation Products: FactoryTalk® Analytics™ LogixAI® Problem Types: CWE-497 Description: An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1748.html
CVE ID: CVE-2025-9365 State: PUBLISHED Published: 2025-09-03T19:34:41.579Z Last Updated: 2025-09-03T20:38:21.773Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Fuji Electric Products: FRENIC-Loader 4 Problem Types: CWE-502 Description: Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-245-02 - https://felib.fujielectric.co.jp/en/M10009/M20029/document_detail/b2f23970-e560-4961-8013-fc72be43681a
CVE ID: CVE-2025-9367 State: PUBLISHED Published: 2025-09-10T06:38:47.869Z Last Updated: 2025-09-10T20:29:07.323Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: uscnanbu Products: Welcart e-Commerce Problem Types: CWE-79 Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 2.11.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site
arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/829facc1-443d-481f-b23f-7a93938dd866?source=cve - https://wordpress.org/plugins/usc-e-shop/#developers - https://plugins.trac.wordpress.org/changeset/3357586/usc-e-shop/trunk/classes/usceshop.class.php
CVE ID: CVE-2025-9371 State: PUBLISHED Published: 2025-10-09T11:20:56.887Z Last Updated: 2025-10-09T14:35:04.330Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: MuffinGroup Products: Betheme Problem Types: CWE-79 Description: The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional
above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f9da9d45-39e2-4b07-baed-1f7d7f67602e?source=cve - https://themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048#item-description__version-28-1-7-september-3rd-2025
CVE ID: CVE-2025-9372 State: PUBLISHED Published: 2025-10-03T11:17:17.607Z Last Updated: 2025-10-03T18:16:30.694Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gbsdeveloper Products: Ultimate Multi Design Video Carousel Problem Types: CWE-79 Description: The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects mu
inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/91aaf15f-dc47-4f7f-b5f7-aba7c67f7233?source=cve - https://wordpress.org/plugins/ultimate-multi-design-video-carousel/
CVE ID: CVE-2025-9374 State: PUBLISHED Published: 2025-08-29T04:25:28.998Z Last Updated: 2025-08-29T12:00:10.774Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: briancolinger Products: Ultimate Tag Warrior Importer Problem Types: CWE-352 Description: The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to import tags granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP V
trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/218d0d28-16db-4d9c-b643-6cc2edfc74e2?source=cve - https://wordpress.org/plugins/utw-importer/
CVE ID: CVE-2025-9375 State: PUBLISHED Published: 2025-09-01T16:43:18.220Z Last Updated: 2025-09-11T15:16:13.844Z Vendors: xmltodict Products: xmltodict Problem Types: CWE-91 Description: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fluidattacks.com/advisories/mono - https://github.com/martinblech/xmltodict - https://github.com/martinblech/xmltodict/blob/v0.15.1/CHANGELOG.md - https://github.com/martinblech/xmltodict/commit/f98c90f071228ed73df997807298e1df4f790c33
CVE ID: CVE-2025-9376 State: PUBLISHED Published: 2025-08-28T11:16:21.743Z Last Updated: 2025-08-28T14:48:14.973Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: sminozzi Products: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Problem Types: CWE-863 Description: The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capability check on the 'stopbadbots_check_wordpress_logged_in_cookie' function in all versions up to, and including, 11.58. This makes it possible for unauthenticated attackers to bypass blocklists
n in all versions up to, and including, 11.58. This makes it possible for unauthenticated attackers to bypass blocklists, rate limits, and other plugin functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8d6b0d86-3cb4-4723-b677-141c604f00cc?source=cve - https://plugins.trac.wordpress.org/browser/stopbadbots/trunk/stopbadbots.php#L1958 - https://plugins.trac.wordpress.org/changeset/3350927/ - https://plugins.trac.wordpress.org/changeset/3351023/
CVE ID: CVE-2025-9377 State: PUBLISHED Published: 2025-08-29T17:30:33.700Z Last Updated: 2025-10-21T22:45:20.031Z Vendors: TP-Link Systems Inc. Products: Archer C7(EU) V2, TL-WR841N/ND(MS) V9 Problem Types: CWE-78 Description: The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108. Both products have reached the status of EOL (end-of-life). It's recommending to purchase the new product to ensure better performance and security. If replacement is not an option in the short term, please use the second referenc
nsure better performance and security. If replacement is not an option in the short term, please use the second reference link to download and install the patch(es). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4365/ - https://www.tp-link.com/us/support/faq/4308/
CVE ID: CVE-2025-9378 State: PUBLISHED Published: 2025-09-03T06:43:10.099Z Last Updated: 2025-09-03T19:44:48.858Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themehunk Products: Vayu Blocks – Website Builder for the Block Editor Problem Types: CWE-79 Description: The Vayu Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attributes in the Lottie block in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in p
s it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a92d53ab-9c59-4c9c-93e5-32dd05246249?source=cve - https://plugins.trac.wordpress.org/browser/vayu-blocks/tags/1.3.5/trunk/inc/render/lottie/lottie.php#L102 - https://plugins.trac.wordpress.org/changeset/3351839/
CVE ID: CVE-2025-9379 State: PUBLISHED Published: 2025-08-24T06:32:06.208Z Last Updated: 2025-08-25T20:22:36.309Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C/E:ND/RL:ND/RC:UR) Vendors: Belkin Products: AX1800 Problem Types: CWE-345 Description: A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3212
did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321212 - https://vuldb.com/?ctiid.321212 - https://vuldb.com/?submit.628641 - https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Belkin/AX1800.md
CVE ID: CVE-2025-9380 State: PUBLISHED Published: 2025-08-24T07:02:07.483Z Last Updated: 2025-08-25T20:23:22.268Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: FNKvision Products: Y215 CCTV Camera Problem Types: CWE-798, CWE-259 Description: A vulnerability was identified in FNKvision Y215 CCTV Camera 10.194.120.40. Affected by this issue is some unknown functionality of the file /etc/passwd of the component Firmware. Such manipulation leads to hard-coded credentials. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in
it is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321213 - https://vuldb.com/?ctiid.321213 - https://vuldb.com/?submit.629810 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-1-hardcoded-root-credentials-in-multiple-binaries
CVE ID: CVE-2025-9381 State: PUBLISHED Published: 2025-08-24T07:32:06.722Z Last Updated: 2025-08-25T20:23:54.454Z Severity: LOW (CVSS 1.6 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: FNKvision Products: Y215 CCTV Camera Problem Types: CWE-200, CWE-284 Description: A security flaw has been discovered in FNKvision Y215 CCTV Camera 10.194.120.40. This affects an unknown part of the file /tmp/wpa_supplicant.conf. Performing manipulation results in information disclosure. The attack may be carried out on the physical device. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be
ed as high. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321214 - https://vuldb.com/?ctiid.321214 - https://vuldb.com/?submit.629811 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-2-ssid-and-wi-fi-password-stored-in-plaintext
CVE ID: CVE-2025-9382 State: PUBLISHED Published: 2025-08-24T08:02:06.923Z Last Updated: 2025-08-25T13:46:22.860Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: FNKvision Products: Y215 CCTV Camera Problem Types: CWE-912 Description: A weakness has been identified in FNKvision Y215 CCTV Camera 10.194.120.40. This vulnerability affects unknown code of the file s1_rf_test_config of the component Telnet Sevice. Executing manipulation can lead to backdoor. The physical device can be targeted for the attack. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been made available to the
erized by high complexity. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321215 - https://vuldb.com/?ctiid.321215 - https://vuldb.com/?submit.629812 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-3-sd-card-factory-backdoor
CVE ID: CVE-2025-9383 State: PUBLISHED Published: 2025-08-24T09:32:07.324Z Last Updated: 2025-08-25T20:24:19.216Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: FNKvision Products: Y215 CCTV Camera Problem Types: CWE-328, CWE-327 Description: A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40. This issue affects the function crypt of the file /etc/passwd. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor
high. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321216 - https://vuldb.com/?ctiid.321216 - https://vuldb.com/?submit.629813 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 - https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-4-weak-password-hashing-des
CVE ID: CVE-2025-9384 State: PUBLISHED Published: 2025-08-24T10:02:07.626Z Last Updated: 2025-08-25T20:25:03.416Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: appneta Products: tcpreplay Problem Types: CWE-476, CWE-404 Description: A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 4.5.2-beta2 is recommended to address this issue. Upgrading the affected component is advised. The vendor expl
o version 4.5.2-beta2 is recommended to address this issue. Upgrading the affected component is advised. The vendor explains, that he was "[a]ble to reproduce in 6fcbf03 but not in 4.5.2-beta2". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321217 - https://vuldb.com/?ctiid.321217 - https://vuldb.com/?submit.630496 - https://github.com/appneta/tcpreplay/issues/971 - https://github.com/appneta/tcpreplay/issues/971#issuecomment-3199014524 - https://drive.google.com/file/d/1oVmsER6CXULLz_rnIyL410DJqO_hBtw_/view?usp=sharing
CVE ID: CVE-2025-9385 State: PUBLISHED Published: 2025-08-24T10:32:06.713Z Last Updated: 2025-08-25T20:25:47.249Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: appneta Products: tcpreplay Problem Types: CWE-416, CWE-119 Description: A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
ed. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321218 - https://vuldb.com/?ctiid.321218 - https://vuldb.com/?submit.630497 - https://github.com/appneta/tcpreplay/issues/972 - https://github.com/appneta/tcpreplay/issues/972#issuecomment-3199019278 - https://drive.google.com/file/d/1BQZF558bRHv07wtlCoZgtqTlEpHgfytp/view?usp=sharing
CVE ID: CVE-2025-9386 State: PUBLISHED Published: 2025-08-24T11:02:07.459Z Last Updated: 2025-08-25T20:26:30.907Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: appneta Products: tcpreplay Problem Types: CWE-416, CWE-119 Description: A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected co
nd may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321219 - https://vuldb.com/?ctiid.321219 - https://vuldb.com/?submit.630498 - https://github.com/appneta/tcpreplay/issues/973 - https://drive.google.com/file/d/1DcQWaTmj1HSbRidOCWwe9vtgHsBnFuX7/view?usp=sharing