A critical stack-based buffer overflow in the Netcore NR255-V router allows authenticated attackers to corrupt memory and potentially achieve remote code execution.

The device is susceptible to a stack-based buffer overflow (CWE-121) within the wake_up_set.cgi component. This vulnerability is triggered by sending specially crafted MAC and ID values, which the system fails to tokenize safely, allowing an attacker with low privileges to trigger memory corruption.

Successful exploitation of this vulnerability poses a severe risk to network integrity and confidentiality. Given the CVSS score of 8.8, this flaw could allow an attacker to gain unauthorized control over the networking hardware, potentially leading to full device compromise, interception of network traffic, or the use of the router as a pivot point for further lateral movement within the internal network.

Immediate Action: Since no official patch is currently identified, administrators should restrict access to the web management interface to trusted internal segments and disable the wake_up_set.cgi functionality if not required.

Proactive Monitoring: Monitor system logs for unusual HTTP requests targeting the wake_up_set.cgi endpoint and watch for device reboots or instability that may indicate crash-based exploitation attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) rule to inspect and drop traffic containing malformed or excessively long MAC and ID values directed at the management interface.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the research references provided by the CVE record.

The high severity of this vulnerability necessitates immediate attention, as it provides a direct path for memory corruption and potential code execution on critical infrastructure. Organizations utilizing the Netcore NR255-V router must implement network-level access controls immediately to isolate the web management interface while awaiting further guidance or firmware updates from the vendor.