CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and librcm.so binaries. The sub4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in NVRAM via nvramsafeset"dmzipaddr", .... These values are later...

The vulnerability of the setDMZ() function (/goform/setDMZ) of the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setDMZ function /goform/setDMZ of the microprogrammed routing software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output goes beyond the buffer boundaries in memory when processing the DMZIPAddress parameter...

CVE-2025-8832

The CVE-2025-8832 entry affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices up to 20250801. The vulnerability is in the setDMZ function on the /goform/setDMZ endpoint where manipulation of the DMZIPAddress parameter causes a stack-based buffer overflow. The attack can be initiated r...