Medium severity6.5NVD Advisory· Published Jul 15, 2025· Updated Jun 17, 2026

CVE-2025-52081

Description

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the usb_folder parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/XR300llm-fuzzy2 versions
V1.0.3.38_10.3.30+ 1 more
- (no CPE)range: V1.0.3.38_10.3.30
- (no CPE)
Netgear/Xr300 Firmware
cpe:2.3:o:netgear:xr300_firmware:1.0.3.38:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/lafdrew/IOT/blob/main/Netgear%20XR300/usb_folder%20of%20usb_device.cgi/buffer%20overflow%20in%20usb_folder%20of%20usb_device.cgi.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000