Linksys多款产品 命令注入漏洞

The Linksys RE6250, among others, is a wireless extender from Linksys USA. A command injection vulnerability exists in various Linksys products, which stems from improper manipulation of the staticGateway parameter in the uminspectcrossband function, which could lead to os command injection. The...

Linksys多款产品 安全漏洞

Linksys RE6250 and others are a wireless extender from Linksys USA. A security vulnerability exists in various Linksys products, which stems from the improper manipulation of the portNumber parameter in the remoteManagement function, which may result in a stack buffer overflow. The following...

Linksys多款产品 命令注入漏洞

The Linksys RE6250, among others, is a wireless extender from Linksys USA. A command injection vulnerability exists in various Linksys products. The vulnerability stems from improper manipulation of the DeviceName parameter in the setDeviceName function, which may result in os command injection...

Linksys多款产品 安全漏洞

Linksys RE6250 and others are a wireless extender from Linksys USA. A security vulnerability exists in various Linksys products, which stems from a mishandling of the submitSSID1 parameter in the wirelessBasic function, which may result in a stack buffer overflow. The following products and...

CVE-2025-8820 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflow

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function wirelessBasic of the file /goform/wirelessBasic. The manipulation of the argument submitSSID1 leads to stack-based buffer overflow. The attack can be...

CVE-2025-8818

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function setDFSSetting of the file /goform/setLan. The manipulation of the argument lanNetmask/lanIp leads to os command injection. The attack may be launched...

CVE-2025-8818

The CVE-2025-8818 issue affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 devices. The vulnerability lies in the setDFSSetting function in the /goform/setLan endpoint; manipulating the lanNetmask/lanIp parameters enables OS command injection. Exploitation can be remote, and public...

CVE-2025-8816 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function setOpMode of the file /goform/setOpMode. The manipulation of the argument ethConv leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2025-8816

CVE-2025-8816 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 routers. The vulnerability is a stack-based buffer overflow in the /goform/setOpMode function when the ethConv argument is manipulated, allowing remote execution. Exploitation is publicly disclosed per the source descriptions...

Linksys多款产品 命令注入漏洞

Linksys RE6250 and others are products of Linksys, Inc.Linksys RE6250 is a wireless extender.Linksys RE6500 is a wireless extender.Linksys EA6350 is a wireless router. A command injection vulnerability exists in several Linksys products. The vulnerability originates from the function setDFSSettin...

Linksys多款产品 安全漏洞

Linksys RE6250 and others are products of Linksys, Inc.Linksys RE6250 is a wireless extender.Linksys RE6500 is a wireless extender.Linksys EA6350 is a wireless router. A security vulnerability exists in various Linksys products that originates from a stack buffer overflow caused by the function...

Linksys多款产品 安全漏洞

Linksys RE6250 and others are a wireless extender from Linksys USA. A security vulnerability exists in various Linksys products, which originates from a stack buffer overflow caused by the function setLan parameter lan2enabled in the file /goform/setLan, which could lead to a remote attack. The...

PT-2025-32496 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 versions up to 20250801 Description: A vulnerability exists in Linksys range extenders. The issue is a stack-based buffer overflow triggered by manipulating the staticIp argument of th...

PT-2025-32491 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 versions up to 20250801 Description: A vulnerability exists in Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers. The setOpMode function within the /goform/setOpMode...

CVE-2025-5441

A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setDeviceURL of the file /goform/setDeviceURL. The manipulation of the argument DeviceURL...

Linksys多款产品 安全漏洞

Linksys RE6300 and others are products of Linksys, Inc.Linksys RE6300 is a wireless network signal extender.Linksys RE7000 is a wireless signal extender.Linksys RE6250 is a wireless extender. A security vulnerability exists in various Linksys products, which stems from the incorrect operation of...

Linksys多款产品 命令注入漏洞

Linksys RE6300 and others are products of Linksys, Inc.Linksys RE6300 is a wireless network signal extender.Linksys RE7000 is a wireless signal extender.Linksys RE6250 is a wireless extender. A command injection vulnerability exists in various Linksys products, which stems from incorrect...

PT-2025-23509 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...

VulnCheck KEV: CVE-2024-25852

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the AccessControlList parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights...

Linksys RE7000 Command Injection Vulnerability

The Linksys RE7000 is a wireless signal extender from Linksys USA. The Linksys RE7000 suffers from a command injection vulnerability that stems from the AccessControlList parameter failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...