CVE-2025-5447

🗓️ 02 Jun 2025 13:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 72 Views🌐 WEB

Critical OS command injection vulnerability in Linksys devices affecting ssid1MACFilter function.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the ssid1MACFilter() function in the Linksys wireless signal amplifiers’ software allows a hacker to execute arbitrary commands.	5 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-5447	2 Jun 202514:39	–	circl
CNNVD	Linksys多款产品命令注入漏洞	2 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-5447 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection	2 Jun 202513:31	–	cvelist
EUVD	EUVD-2025-16659	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5447	2 Jun 202514:15	–	nvd
OSV	CVE-2025-5447	2 Jun 202514:15	–	osv
Positive Technologies	PT-2025-23517 · Linksys · Linksys Re6300 +5	25 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5447	4 Jun 202514:10	–	redhatcve
Vulnrichment	CVE-2025-5447 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection	2 Jun 202513:31	–	vulnrichment

NVD

Vulners

Node

AND

linksys re9000_firmwareMatch1.0.04.002

linksys re9000Match-

Node

AND

linksys re6250_firmwareMatch1.0.04.001

linksys re6250Match-

Node

AND

linksys re6300_firmwareMatch1.2.07.001

linksys re6300Match-

Node

AND

linksys re6350_firmwareMatch1.0.04.001

linksys re6350Match-

Node

AND

linksys re7000_firmwareMatch1.1.05.003

linksys re7000Match-

Node

AND

linksys re6500_firmwareMatch1.0.013.001

linksys re6500Match-

[
  {
    "vendor": "Linksys",
    "product": "RE6500",
    "versions": [
      {
        "version": "1.0.013.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.002",
        "status": "affected"
      },
      {
        "version": "1.1.05.003",
        "status": "affected"
      },
      {
        "version": "1.2.07.001",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE6250",
    "versions": [
      {
        "version": "1.0.013.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.002",
        "status": "affected"
      },
      {
        "version": "1.1.05.003",
        "status": "affected"
      },
      {
        "version": "1.2.07.001",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE6300",
    "versions": [
      {
        "version": "1.0.013.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.002",
        "status": "affected"
      },
      {
        "version": "1.1.05.003",
        "status": "affected"
      },
      {
        "version": "1.2.07.001",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE6350",
    "versions": [
      {
        "version": "1.0.013.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.002",
        "status": "affected"
      },
      {
        "version": "1.1.05.003",
        "status": "affected"
      },
      {
        "version": "1.2.07.001",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE7000",
    "versions": [
      {
        "version": "1.0.013.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.002",
        "status": "affected"
      },
      {
        "version": "1.1.05.003",
        "status": "affected"
      },
      {
        "version": "1.2.07.001",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE9000",
    "versions": [
      {
        "version": "1.0.013.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.001",
        "status": "affected"
      },
      {
        "version": "1.0.04.002",
        "status": "affected"
      },
      {
        "version": "1.1.05.003",
        "status": "affected"
      },
      {
        "version": "1.2.07.001",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_10/10.md
vuldb	www.vuldb.com/
linksys	www.linksys.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
apselect_%d	request body	/goform/ssid1MACFilter	OS command injection via manipulated parameters leading to remote arbitrary command execution.	CWE-77, CWE-78
newap_text_%d	request body	/goform/ssid1MACFilter	OS command injection via manipulated parameters leading to remote arbitrary command execution.	CWE-77, CWE-78

17 Jun 2026 09:47Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.32561

SSVC