VULNERABILITY INTELLIGENCE
CVE-2025-9483
CVSS score8.8 HIGH
EPSS probability1.05%
CISA KEVNot currently listed
Published2025-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function singlePortForwardAdd of the file /goform/singlePortForwardAdd. This manipulation of the argument ruleName/schedule/inboundFilter causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness classification
- cna@vuldb.com: CWE-119
Primary references
- cna@vuldb.com — Exploit, Third Party Advisory
- cna@vuldb.com — Exploit, Third Party Advisory
- cna@vuldb.com — Permissions Required
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Product
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory