Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow vulnerability in the reboot_timer_set.cgi endpoint. The issue arises from improper token parsing with sscanf, which allows an attacker to corrupt stack memory by submitting specially crafted input. This vulnerability has a CVSS 4.0 base score of 8.6, indicating high severity. No known exploits are reported in the wild, and no patch or remediation information is provided in the available data.

Successful exploitation can lead to stack memory corruption, which may result in denial of service or potentially arbitrary code execution depending on the context and privileges. The vulnerability requires high privileges to exploit and does not require user interaction. The attack vector is network-based with low attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Until a patch is available, restrict access to the affected endpoint and monitor for suspicious activity if possible.