The vulnerability of the setDeviceName() function (/goform/setDeviceName) in the microprogrammed software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary commands.

The vulnerability of the setDeviceName function /goform/setDeviceName of Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers lies in the lack of measures to neutralize special elements during the processing of the DeviceName parameter. Exploiting this vulnerability allows an attack...

CVE-2025-8823

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setDeviceName of the file /goform/setDeviceName. The manipulation of the argument DeviceName leads to os command injection. The attack can be...

The vulnerability of the setDeviceName() function in the global.so library of the TOTOLink A950RG router’s software allows a intruder to execute arbitrary commands.

The vulnerability of the setDeviceName function in the global.so library of the TOTOLink A950RG router’s software is due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands by processing the...