A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function WPSSTAPINEnr of the file /goform/WPSSTAPINEnr. Performing manipulation of the argument ssid results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_14/14.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.320776 | Permissions Required |
| https://vuldb.com/?id.320776 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.631518 | Third Party Advisory VDB Entry |
| https://www.linksys.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
History
02 Sep 2025, 18:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linksys:re6250_firmware:1.0.04.001:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6300_firmware:1.2.07.001:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6500:-:*:*:*:*:*:*:* cpe:2.3:o:linksys:re9000_firmware:1.0.04.002:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6300:-:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6250:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re7000:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6350:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re9000:-:*:*:*:*:*:*:* cpe:2.3:o:linksys:re7000_firmware:1.1.05.003:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:*:*:*:*:*:*:* |
|
| First Time |
Linksys re9000 Firmware
Linksys Linksys re6350 Firmware Linksys re6500 Linksys re6250 Linksys re7000 Firmware Linksys re9000 Linksys re6300 Firmware Linksys re6500 Firmware Linksys re6350 Linksys re6300 Linksys re6250 Firmware Linksys re7000 |
|
| References | () https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_14/14.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.320776 - Permissions Required | |
| References | () https://vuldb.com/?id.320776 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.631518 - Third Party Advisory, VDB Entry | |
| References | () https://www.linksys.com/ - Product |
22 Aug 2025, 18:09
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
20 Aug 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-20 20:15
Updated : 2025-09-02 18:22
NVD link : CVE-2025-9245
Mitre link : CVE-2025-9245
CVE.ORG link : CVE-2025-9245
JSON object : View
Products Affected
linksys
- re6250
- re6350
- re6500
- re7000_firmware
- re9000_firmware
- re6250_firmware
- re6300_firmware
- re6350_firmware
- re7000
- re9000
- re6300
- re6500_firmware