PT-2025-34861

CVE-2025-9526

Published

2025-07-15

Updated

2025-10-09

Description by

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linksys E1700 version 1.0.0.4.003

Description: A stack-based buffer overflow exists in the setSysAdm function of the /goform/setSysAdm file. Manipulation of the rm port argument can trigger this issue, allowing for remote code execution. The vulnerability has been publicly disclosed.

Recommendations: Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /goform/setSysAdm file to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121: Stack-based Buffer Overflow

Related identifiers

CVE-2025-9526