CVE-2025-50404

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intelbras:rx_1500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:rx_1500:-:*:*:*:*:*:*:*

History

20 Aug 2025, 17:05

Type Values Removed Values Added
First Time Intelbras
Intelbras rx 1500 Firmware
Intelbras rx 1500
References () https://github.com/feiwuxingxie/cve/blob/main/Intelbras/vul01/01.md - () https://github.com/feiwuxingxie/cve/blob/main/Intelbras/vul01/01.md - Exploit, Third Party Advisory
References () https://www.intelbras.com/en - () https://www.intelbras.com/en - Product
CPE cpe:2.3:o:intelbras:rx_1500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:rx_1500:-:*:*:*:*:*:*:*

08 Jul 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-01 15:15

Updated : 2025-08-20 17:05


NVD link : CVE-2025-50404

Mitre link : CVE-2025-50404

CVE.ORG link : CVE-2025-50404


JSON object : View

Products Affected

intelbras

  • rx_1500
  • rx_1500_firmware
CWE
CWE-190

Integer Overflow or Wraparound