The vulnerability of the setDMZ() function (/goform/setDMZ) of the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause a service failure.

🗓️ 13 Aug 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Linksys setDMZ vulnerability allows remote code execution via demilitarized zone address overflow.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-8832	11 Aug 202506:01	–	circl
CNNVD	Linksys多款产品安全漏洞	11 Aug 202500:00	–	cnnvd
CVE	CVE-2025-8832	11 Aug 202505:32	–	cve
Cvelist	CVE-2025-8832 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow	11 Aug 202505:32	–	cvelist
EUVD	EUVD-2025-24126	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8832	11 Aug 202506:15	–	nvd
OSV	CVE-2025-8832	11 Aug 202506:15	–	osv
Positive Technologies	PT-2025-32521 · Linksys · Linksys Re9000 +5	1 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8832	13 Aug 202506:27	–	redhatcve
Vulnrichment	CVE-2025-8832 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow	11 Aug 202505:32	–	vulnrichment

Vulners

Node

linksys_holdings,re6500Match1.0.013.001

OR

linksys_holdings,re6250Match1.0.04.001

OR

linksys_holdings,re6300Match1.2.07.001

OR

linksys_holdings,re6350Match1.0.04.001

OR

linksys_holdings,re7000Match1.1.05.003

OR

linksys_holdings,re9000Match1.0.04.002

Source	Link
github	www.github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
linksys	www.linksys.com/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Aug 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 38.8

CVSS 29

EPSS0.00902

linksys routers demilitarized zone address remote code execution service failure buffer overflow