Medium severity6.5NVD Advisory· Published Jul 15, 2025· Updated Jun 17, 2026

CVE-2025-52080

Description

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the share_name parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Xr300 Firmware
cpe:2.3:o:netgear:xr300_firmware:1.0.3.38:*:*:*:*:*:*:*
Netgear/XR300cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.0.3.38_10.3.30

Patches

Vulnerability mechanics

References

github.com/lafdrew/IOT/blob/main/Netgear%20XR300/share_name%20of%20usb_device.cgi/buffer%20overflow%20in%20share_neme%20of%20usb_device.cgi.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000