VULNERABILITY INTELLIGENCE
CVE-2025-15608
CVSS score9.8 CRITICAL
EPSS probability0.67%
CISA KEVNot currently listed
Published2026-03-20
Last modified2026-08-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques. Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.
Weakness classification
- f23511db-6c3e-4e32-a477-6aa17d310630: CWE-121