CVE-2025-8816

🗓️ 10 Aug 2025 15:48:21Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 29 Views🌐 WEB

CVE-2025-8816: Linksys devices up to 20250801; setOpMode ethConv overflow; remote exploit disclosed.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the setOpMode() function in the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause a service failure.	13 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-8816	10 Aug 202518:17	–	circl
CNNVD	Linksys多款产品安全漏洞	10 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-8816 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow	10 Aug 202515:48	–	cvelist
EUVD	EUVD-2025-24096	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8816	10 Aug 202516:15	–	nvd
OSV	CVE-2025-8816	10 Aug 202516:15	–	osv
Positive Technologies	PT-2025-32491 · Linksys · Linksys Re9000 +5	1 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8816	12 Aug 202516:25	–	redhatcve
Vulnrichment	CVE-2025-8816 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow	10 Aug 202515:48	–	vulnrichment

NVD

Vulners

Node

AND

linksys re6250_firmwareMatch1.0.04.001

linksys re6250Match-

Node

AND

linksys re6300_firmwareMatch1.2.07.001

linksys re6300Match-

Node

AND

linksys re6350_firmwareMatch1.0.04.001

linksys re6350Match-

Node

AND

linksys re7000_firmwareMatch1.1.05.003

linksys re7000Match-

Node

AND

linksys re9000_firmwareMatch1.0.04.002

linksys re9000Match-

Node

AND

linksys re6500_firmwareMatch1.0.013.001

linksys re6500Match-

[
  {
    "vendor": "Linksys",
    "product": "RE6250",
    "versions": [
      {
        "version": "20250801",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE6300",
    "versions": [
      {
        "version": "20250801",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE6350",
    "versions": [
      {
        "version": "20250801",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE6500",
    "versions": [
      {
        "version": "20250801",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE7000",
    "versions": [
      {
        "version": "20250801",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Linksys",
    "product": "RE9000",
    "versions": [
      {
        "version": "20250801",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_50/50.md
github	www.github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_50/50.md
vuldb	www.vuldb.com/
linksys	www.linksys.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
ethConv	request body	/goform/setOpMode	Stack-based buffer overflow via ethConv argument in /goform/setOpMode leading to remote code execution on affected Linksys devices.	CWE-119, CWE-121

17 Jun 2026 10:07Current

7.1High risk

Vulners AI Score7.1

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00945

SSVC