← Database

CVE-2025-11789

HIGH CVSS: 7.5 Published: 2025-12-02 Modified: 2026-06-17

Description

Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.

Affected Platforms

Circutor Sge-Plc1000Circutor Sge-Plc50Circutor Sge-Plc1000 FirmwareCircutor Sge-Plc50 Firmware

Weakness Type

CWE-125

References