CVE-2025-54350

LOW

ES Iperf3 < 3.19.1 - Reachable Assertion

Title source: rule
STIX 2.1

Description

In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.

Scores

CVSS v3 3.7
EPSS 0.0004
EPSS Percentile 11.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-617
Status published
Products (1)
es/iperf3 3.2 - 3.19.1
Published Aug 03, 2025
Tracked Since Feb 18, 2026