CVE-2025-50404 Integer overflow in n/a
An integer overflow in the Intelbras RX1500 router allows attackers to overwrite memory fields via crafted HTTP headers, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-50404?
CVE-2025-50404 is a medium-severity vulnerability in n/a, published on 1 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array.
Weakness: CWE-190
Which versions are affected by CVE-2025-50404?
It affects 1 product.
Products include Intelbras Rx 1500 Firmware.
How do I fix CVE-2025-50404?
No fix has been published for CVE-2025-50404 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-50404 being exploited?
There is no known exploitation of CVE-2025-50404 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-6659-vrc2-p5xg.