Sge Plc1000 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:circutor:sge-plc1000_firmware:9.0.2:*:*:*:*:*:*:*

part: o version: 9.0.2 update: *

VendorCircutor (ca159144-045f-5d8f-ae81-c71b6d00748f)
ProductSge Plc1000 Firmware (33ad5a2f-2f03-57e5-ade3-61da12a2cecf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11789 vulnerable 2026-06-08 07:04:28.936990 Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.
Published: 2025-12-02T13:04:38.363Z
Updated: 2025-12-02T13:27:16.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11788 vulnerable 2026-06-08 07:04:28.936278 Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowSupervisorParameters()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.
Published: 2025-12-02T13:03:32.925Z
Updated: 2025-12-02T13:31:08.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11787 vulnerable 2026-06-08 07:04:28.935531 Command injection vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.
Published: 2025-12-02T13:02:40.055Z
Updated: 2025-12-02T13:31:49.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11786 vulnerable 2026-06-08 07:04:28.935073 Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'SetUserPassword()' function, the 'newPassword' parameter is directly embedded in a shell command string using 'sprintf()' without any sanitisation or validation, and then executed using 'system()'. This allows an attacker to inject arbitrary shell commands that will be executed with the same privileges as the application.
Published: 2025-12-02T13:01:37.231Z
Updated: 2025-12-02T13:36:41.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11785 vulnerable 2026-06-08 07:04:28.934282 Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowMeterPasswords()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.
Published: 2025-12-02T13:01:25.600Z
Updated: 2025-12-02T13:37:33.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11784 vulnerable 2026-06-08 07:04:28.933532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11783 vulnerable 2026-06-08 07:04:28.932893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11782 vulnerable 2026-06-08 07:04:28.932058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11781 vulnerable 2026-06-08 07:04:28.931485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11780 vulnerable 2026-06-08 07:04:28.930919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11779 vulnerable 2026-06-08 07:04:28.928938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.