CVE-2025-29044CRITICAL 9.8EPSS p54.0%

CVE-2025-29044CVE-2025-29044

Description

Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key value

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.87% probability of exploitation · percentile 54.0% · 2026-06-19T12:03:05Z
Published2025-04-17
Last modified2025-04-21

Underlying weaknesses· 1

CWE-120

References

  1. https://gist.github.com/xyqer1/09fe6488a6655776c8c5d33e630a0f2a
  2. https://github.com/xyqer1/Netgear-R6100-cgiMain-QUERY_STRING-StackOverflow?tab=readme-ov-file
  3. https://gist.github.com/xyqer1/09fe6488a6655776c8c5d33e630a0f2a
  4. https://github.com/xyqer1/Netgear-R6100-cgiMain-QUERY_STRING-StackOverflow?tab=readme-ov-file

1

TypeTargetConfidenceTier
WeaknessBuffer Copy without Checking Size of Input ('Classic Buffer Overflow')cwe-1200%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-4140
CVE
CVE-2025-4141
CVE
NETGEAR Multiple Devices Buffer Overflow Vulnerability
CVE
CVE-2025-6565
CVE
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
CVE
CVE-2025-4147
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.