Skip to content
9.8 Critical

CVE-2025-41732 An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary…

Description

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.

Affected products and versions

Product Affected versions Fixed in
Indsutrial-Managed-Switches 0.0 0.0.0 → < 02.64 02.64
The 2 CVEs of Indsutrial-Managed-Switches →
Track this CVE