CVE-2019-25705

CVE-2019-25705 is a stack buffer overflow vulnerability affecting Echo Mirage version 3.1 and earlier. The flaw exists in the Rules action field, where local attackers can supply an oversized string to trigger memory corruption and potentially execute arbitrary code on the affected system. An attacker would need to craft a malicious payload and paste it through the application's Rules dialog interface to exploit this vulnerability. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8. It requires local access and low privileges but has no additional complexity constraints, meaning an authenticated attacker can readily exploit it. The impact is severe, enabling complete compromise of system confidentiality, integrity, and availability through code execution or application crashes. There is currently no evidence of active exploitation in the wild, as this vulnerability does not appear on the Known Exploited Vulnerabilities catalog and remains inactive on threat intelligence hotlists. The EPSS score of 0.00016 indicates extremely low probability of exploitation compared to other disclosed vulnerabilities. While the FAUCET Risk Score of 50.0 suggests moderate concern from a vulnerability management perspective, immediate patching is not urgently required unless the affected systems operate in sensitive environments with local user access.