CVE-2025-25527

5.1 mediumEPSS 0.2%

Medium (5.1) in ruijie rg-nbr2600s firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Severity

CVSS 3.1

5.1 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2025-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ruijie:rg-nbr2600s_firmware

References

https://gist.github.com/XiaoCurry/354620285280aca98acba94a9c5fffb6

Check your stack JSON