CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-9361 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 ipRangeBlockManageRule stack-based overflow

A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The affected element is the function ipRangeBlockManageRule of the file /goform/ipRangeBlockManageRule. Performing manipulation of the argument...

CVE-2025-9357

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function langSwitchByBBS of the file /goform/langSwitchByBBS. The manipulation of the argument langSelectionOnly leads to stack-bas...

CVE-2025-9357

CVE-2025-9357 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 routers (firmware versions 1.0.013.001, 1.0.04.001, 1.0.04.002, 1.1.05.003, 1.2.07.001). The vulnerability lies in the function langSwitchByBBS in the file /goform/langSwitchByBBS where manipulating the argument langSelection...

Linksys多款产品 安全漏洞

Linksys RE6300 and others are products of Linksys, Inc.Linksys RE6300 is a wireless network signal extender.Linksys RE6250 is a wireless extender.Linksys RE6350 is a wireless extender.Linksys RE6350 is a wireless extender.Linksys RE6350 is a wireless extender.Linksys RE6350 is a wireless...

CVE-2025-9303 TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit ha...

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-9297

The CVE-2025-9297 issue affects Tenda i22 firmware version 1.0.0.3(4687). The vulnerability resides in the function formWeixinAuthInfoGet in /goform/wxportalauth, where manipulating the Type argument causes a stack-based buffer overflow, enabling remote exploitation. Multiple sources confirm a ne...

CVE-2025-9250 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setPWDbyBBS stack-based overflow

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This impacts the function setPWDbyBBS of the file /goform/setPWDbyBBS. Such manipulation of the argument hint leads to stack-based buffer overflow. ...

CVE-2025-9245

A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function WPSSTAPINEnr of the file /goform/WPSSTAPINEnr. Performing manipulation of the argument ssid results in stack-based...

PT-2025-34163 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 versions 1.0.013.001 through 1.2.07.001 Description: A security flaw exists in Linksys range extenders. Manipulation of the Ssid argument in the sta wps pin function within the...

CVE-2025-9089

A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and...

CVE-2025-9089

The CVE-2025-9089 entry concerns the Tenda AC20 router (firmware 16.03.08.12). Affected component: the sub_48E628 function in /goform/SetIpMacBind. Root cause: improper validation of the input argument list leads to a stack-based buffer overflow, enabling remote consideration of an attack vector....

CVE-2025-8958

A vulnerability was identified in Tenda TX3 16.03.13.11multiTDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...

CVE-2025-8826

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function umrpautochannel of the file /goform/RPsetBasicAuto. The manipulation of the argument apcliAuthMode2G/apcliAuthMode5G leads to stack-based buffer...

CVE-2025-8822

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function algDisable of the file /goform/setOpMode. The manipulation of the argument opMode leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2025-8820

CVE-2025-8820 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000. Root cause: stack-based overflow in the wirelessBasic function (/goform/wirelessBasic) triggered by manipulating the submit_SSID1 argument, exploitable remotely. Public exploit disclosure noted; vendor response repor...

CVE-2025-8819

The CVE-2025-8819 issue affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 series (firmware up to 20250801). The vulnerability lies in the /goform/setWan file, specifically the setWan function, where crafting an input for the staticIp argument triggers a stack-based buffer overflow. This e...

CVE-2025-8817

CVE-2025-8817 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000. The vulnerability exists in the setLan function of /goform/setLan and is triggered by manipulating the lan2enabled argument, causing a stack-based buffer overflow. This vulnerability allows remote exploitation and ha...

PT-2025-32496 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 versions up to 20250801 Description: A vulnerability exists in Linksys range extenders. The issue is a stack-based buffer overflow triggered by manipulating the staticIp argument of th...