Back to search
CVE-2025-8760
Published: Aug 13, 2025
Modified: Aug 13, 2025
PUBLISHED
CVSS v3.1
9.8
CRITICAL
Description
A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely.
| Vendor | Product | Versions |
|---|---|---|
INSTAR | 2K+ | affected 3.11.1 Build 1124 |
INSTAR | 4K | affected 3.11.1 Build 1124 |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:W/RC:R
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
References
VDB-319863 | INSTAR 2K+/4K fcgi_server base64_decode buffer overflow
vdb-entry
technical-description
VDB-319863 | CTI Indicators (IOB, IOC, IOA)
signature
permissions-required
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now