CVE-2025-50404
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow.
Does this matter?
Lower severity and a low EPSS score (9.93%). Track it; it rarely justifies an emergency change on its own.
Description
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 9.93% probability · 96th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- intelbras/rx 1500 firmware
- Source
- cve@mitre.org
EPSS moved from 9.9% on 2 October 2026 to 9.9% on 26 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
References
- https://github.com/feiwuxingxie/cve/blob/main/Intelbras/vul01/01.mdExploit, Third Party Advisory
- https://www.intelbras.com/enProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.