CVE-2025-45029 identifies a heap overflow vulnerability in WINSTAR WN572HP3 firmware version 230525. The flaw exists in the handling of the CONTENT_LENGTH variable at the /cgi-bin/upload.cgi endpoint, where improper validation leads to heap memory corruption. This vulnerability can be exploited remotely without authentication or user interaction, potentially allowing attackers to affect the confidentiality and integrity of the device. The vulnerability is categorized under CWE-122 (Heap-based Buffer Overflow). No known exploits are reported in the wild, and no official patch or mitigation guidance has been published to date.

Successful exploitation of this heap overflow vulnerability could allow an attacker to compromise the confidentiality and integrity of the affected device. The vulnerability does not impact availability and does not require privileges or user interaction to exploit. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official mitigation has been provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the /cgi-bin/upload.cgi endpoint and applying network-level protections may reduce exposure.