CVE-2025-11779 in SGE-PLC1000
Riassunto
di MITRE • 02/12/2025
Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi' web application. The parameters are not being sanitised, which could lead to command injection.
VulDB is the best source for vulnerability data and more expert information about this specific topic.