CVE-2019-25583
CVE-2019-25583 is a medium-severity vulnerability in Raimersoft Rarmaradio with a CVSS 3.x base score of 6.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1282.
Key facts
- Severity: Medium (CVSS 3.x base score 6.2)
- CVSS v4: 6.9
- EPSS exploit prediction: 0% (7th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2019-19908
- Weakness: CWE-1282
- Affected product: Raimersoft Rarmaradio
- Published:
- Last modified:
Description
RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by submitting excessively long input. Attackers can paste a buffer of 5000 bytes into the Username field via Settings > Network to trigger an application crash.
Frequently asked questions
- What is CVE-2019-25583?
- RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by submitting excessively long input. Attackers can paste a buffer of 5000 bytes into the Username field via Settings > Network to trigger an application crash.
- How severe is CVE-2019-25583?
- CVE-2019-25583 has a CVSS 3.x base score of 6.2, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
- Is CVE-2019-25583 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (7th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2019-25583?
- CVE-2019-25583 affects Raimersoft Rarmaradio. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2019-25583?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2019-25583 have an EU (EUVD) identifier?
- Yes. CVE-2019-25583 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2019-19908.
- When was CVE-2019-25583 published?
- CVE-2019-25583 was published on 2026-03-22 and last updated on 2026-06-17.
References
- http://www.raimersoft.com/
- https://www.exploit-db.com/exploits/46900
- https://www.vulncheck.com/advisories/rarmaradio-username-field-denial-of-service
Affected products (1)
- cpe:2.3:a:raimersoft:rarmaradio:2.72.3:*:*:*:*:*:*:*
More vulnerabilities in Raimersoft Rarmaradio
- CVE-2019-25584 — Medium (CVSS 6.2): RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows…
All CVEs affecting Raimersoft Rarmaradio →
Other CWE-1282 vulnerabilities
- CVE-2022-2483 — High (CVSS 8.4): The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for…
- CVE-2019-25358 — High (CVSS 7.5): FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by…
- CVE-2019-25590 — Medium (CVSS 6.2): Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash…
- CVE-2019-25588 — Medium (CVSS 6.2): BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows…
- CVE-2019-25587 — Medium (CVSS 6.2): BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration…
- CVE-2018-25229 — Medium (CVSS 5.5): BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that…