Vulnerability Details CVE-2025-11783
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The vulnerability is found in the 'AddEvent()' function when copying the user-controlled username input to a fixed-size buffer (48 bytes) without boundary checking. This can lead to memory corruption, resulting in possible remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2025-11783
-
cpe:2.3:h:circutor:sge-plc1000:-
-
cpe:2.3:h:circutor:sge-plc50:-
-
cpe:2.3:o:circutor:sge-plc1000_firmware:9.0.2
-
cpe:2.3:o:circutor:sge-plc50_firmware:9.0.2