The vulnerability of the setVlan() function (/goform/setVlan) in the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.

The vulnerability of the setVlan function /goform/setVlan in Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2025-9247

The CVE-2025-9247 entry documents a stack-based buffer overflow in Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices, caused by manipulating the vlan_set argument in /goform/setVlan. A remote attacker could trigger this overflow; exploit has been publicly disclosed (POC). Affected firmwar...

Tenda AC11 缓冲区错误漏洞

The Tenda AC11 is an AC1200 dual-band Gigabit WiFi router. A stack buffer overflow vulnerability exists in /goform/setVLAN in the Tenda AC11 02.03.01.104CN and earlier firmware. An attacker can exploit this vulnerability to execute arbitrary code on the system via a specially crafted post request...