The vulnerability of the `apply_cgi()` and `block_cgi()` functions in the Linksys E1200 router’s microprogramming software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the applycgi and blockcgi functions in the Linksys E1200 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

CVE-2025-60691: Stack-based Buffer Overflow

A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The applycgi and blockcgi functions copy user-supplied input from the "url" CGI parameter into stack buffers v36, v29 using sprintf without bounds checking. Because these buffe...