{"id":"CVE-2025-6511","aliases":["EUVD-2025-18912","GHSA-64jj-vf44-47f7"],"status":"published","title":"Netgear EX6150 sub_410090 stack-based overflow","description":"A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01262,"percentile":0.69883,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-121"],"published":"2025-06-23T16:31:05Z","modified":"2026-06-17T10:02:02Z","products":[{"vendor":"netgear","product":"ex6150"},{"vendor":"netgear","product":"ex6150_firmware"}],"references":[{"url":"https://vuldb.com/?id.313623","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.313623","tags":["signature","permissions-required","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?submit.595999","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?submit.596008","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6150-netgear","tags":["related","Exploit","Third Party Advisory"]},{"url":"https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6150-netgear#poc","tags":["exploit","Exploit","Third Party Advisory"]},{"url":"https://www.netgear.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6511"},{"url":"https://www.netgear.com"},{"url":"https://github.com/advisories/GHSA-64jj-vf44-47f7"}],"sources":{"cve":[{"id":"CVE-2025-6511","title":"Netgear EX6150 sub_410090 stack-based overflow","description":"A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","status":"published","published":"2025-06-23T16:31:05.057Z","modified":"2025-07-15T09:22:10.244Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","level":"high","assessor":"cna"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C","level":"high","assessor":"cna"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C","level":"high","assessor":"cna"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:C","assessor":"cna"}],"cwes":["CWE-121","CWE-119"],"updated_at":"2026-11-02T14:32:40.072186Z"}],"euvd":[{"id":"EUVD-2025-18912","description":"A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","status":"published","published":"2025-06-23T16:31:05Z","modified":"2025-07-15T09:22:10Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","level":"high"}],"updated_at":"2026-11-02T20:32:08.210064Z"}],"ghsa":[{"id":"GHSA-64jj-vf44-47f7","title":"A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This...","description":"A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-06-23T18:30:26Z","modified":"2025-06-23T18:30:33Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:02:48.223406Z"}],"nvd":[{"id":"CVE-2025-6511","description":"A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","status":"published","published":"2025-06-23T17:15:32.347Z","modified":"2026-06-17T10:02:02.857Z","cvss":[{"version":"4.0","score":7.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"secondary"}],"cwes":["CWE-119","CWE-121"],"updated_at":"2026-11-02T14:11:14.091082Z"}]}}