CVE-2025-9527

Name of the Vulnerable Software and Affected Versions: Linksys E1700 version 1.0.0.4.003

Description: A stack-based buffer overflow vulnerability exists in the QoSSetup function of the /goform/QoSSetup file. Manipulation of the ack policy argument can trigger the overflow, potentially allowing for remote exploitation. The vendor was contacted regarding this issue but did not respond.

Recommendations: Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /goform/QoSSetup file to minimize the risk of exploitation.