PT-2025-32497
CVE-2025-8820
·
Published
2025-08-01
·
Updated
2025-09-04
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 versions up to 20250801
Description:
A vulnerability exists due to a stack-based buffer overflow in the
wirelessBasic function within the /goform/wirelessBasic file. The vulnerability is triggered by manipulating the submit SSID1 argument, allowing for remote exploitation. The exploit has been publicly disclosed.Recommendations:
Versions up to 20250801: Address the buffer overflow in the
wirelessBasic function by validating the submit SSID1 argument to prevent excessive input length.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾