May 12, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Tofsee Malware – Active IOCs
May 1, 2025Multiple Netgear Ex6200 Firmware Vulnerabilities
May 1, 2025Tofsee Malware – Active IOCs
May 1, 2025Multiple Netgear Ex6200 Firmware Vulnerabilities
May 1, 2025
Severity
High
Analysis Summary
CVE-2025-4124 CVSS:7.8
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
CVE-2025-4125 CVSS:7.8
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
Impact
- Code Execution
Indicators of Compromise
CVE
CVE-2025-4124
CVE-2025-4125
Affected Vendors
Delta Electronics
Affected Products
- Delta Electronics ISPSoft version 3.20
Remediation
Upgrade to the latest version of Delta Electronics ISPSoft, available from the Delta Electronics Website.
