PT-2025-27045 · Linksys · Linksys Wrt1900Acs+3
Starash
·
Publicado
2025-06-19
·
Atualizado
2025-09-17
·
CVE-2025-6752
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linksys WRT1900ACS, EA7200, EA7450, and EA7500 versions up to 20250619
Description
A critical vulnerability exists in Linksys routers due to a stack-based buffer overflow. The issue is located in the
SetDefaultConnectionService function within the /upnp/control/Layer3Forwarding file of the IGD component. Manipulation of the NewDefaultConnectionService argument can trigger the overflow, allowing for remote exploitation. The exploit for this vulnerability has been publicly disclosed, and the vendor has not responded to reports about the issue.Recommendations
Linksys WRT1900ACS, EA7200, EA7450, and EA7500 versions prior to 20250619 should be updated.
As a temporary workaround, consider disabling the UPnP service to minimize the risk of exploitation.
Restrict access to the
/upnp/control/Layer3Forwarding file to authorized users only.Exploit
Correção
Stack Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linksys Ea7200
Linksys Ea7450
Linksys Ea7500
Linksys Wrt1900Acs