CVE-2025-61128

CRITICAL EPSS 47.5%

Published Oct 28, 20258mo ago · Modified Jun 17, 20261w ago

9.1 CVSS 3.1

Critical

Published Oct 28, 2025 8mo ago

Last Modified Jun 17, 2026 1w ago

Description

Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3_V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi.

CVSS Details

Base Score

9.1

Exploitability

3.9

Impact

5.2

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

47.5% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-121

References 1

gist.github.com https://gist.github.com/shinobu-alpha/6dd5ad7f83c16360f6564db0bc121e99

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.