NVD disclosure day
CVE-2025-22916
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stack overflow vulnerability in RE11S firmware's PPPoE setup function can be triggered by a malformed username, potentially allowing remote attackers to compromise the device. This issue is reachable via network-accessible configuration interfaces and could lead to service disruption or unauthorized control.
CVE-2025-22912
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability in the RE11S firmware allows remote execution of unauthorized commands via the `/goform/formAccept` component. This could lead to device compromise and impact network security if the administrative interface is reachable.
CVE-2025-22907
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical stack overflow vulnerability exists in Edimax RE11S wireless range extender firmware, exploitable via a network request without authentication. This flaw could allow an attacker to impact the device's confidentiality, integrity, and availability.
CVE-2025-22906
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical command injection vulnerability in RE11S firmware allows remote attackers to execute arbitrary commands by sending a crafted request to the WAN configuration interface. This could compromise device functionality and network services. The relevance and exposure across deployed devices need to be confirmed.
CVE-2025-22904
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical stack overflow vulnerability exists in network device firmware that could allow an attacker to gain significant control over affected devices. The vulnerability is triggered by specific input to the `setWAN` function and could lead to denial of service or unauthorized access. Confirming if this technology is