CVE-2025-22913

CVE-2025-22913 is a stack overflow vulnerability (CWE-120) in RE11S version 1.11, triggered by the rootAPmac parameter in the formStaDrvSetup function. Published on 2025-01-16, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its potential for severe impact across confidentiality, integrity, and availability.

Unauthenticated remote attackers can exploit this vulnerability over the network with low complexity and without requiring user interaction. Exploitation of the stack overflow could enable arbitrary code execution, system crashes, or full compromise of the affected RE11S component.

References include a GitHub repository at https://github.com/xyqer1/RE11S_1.11-formStaDrvSetup-StackOverflow containing exploit details, and the vendor site at https://www.edimax.com/edimax/global/ for potential advisories or patches.