A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RP_pingGatewayByBBS of the file /goform/RP_pingGatewayByBBS. The manipulation of the argument ssidhex results in stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_17/17.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.320779 | Permissions Required |
| https://vuldb.com/?id.320779 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.631521 | Third Party Advisory VDB Entry |
| https://www.linksys.com/ | Product |
| https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_17/17.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
History
No history.
Information
Published : 2025-08-20 21:15
Updated : 2025-09-02 18:22
NVD link : CVE-2025-9248
Mitre link : CVE-2025-9248
CVE.ORG link : CVE-2025-9248
JSON object : View
Products Affected
linksys
- re6300
- re9000
- re6500
- re9000_firmware
- re6300_firmware
- re6250_firmware
- re7000_firmware
- re6350_firmware
- re6350
- re6500_firmware
- re6250
- re7000