PT-2025-34539 · Linksys · Linksys Re6250+5

Pjq123 · Published 2025-08-23 · Updated 2025-08-24 · CVE-2025-9363

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linksys RE6250 version 1.0.013.001 Linksys RE6300 version 1.0.013.001 Linksys RE6350 version 1.0.013.001 Linksys RE6500 version 1.0.013.001 Linksys RE7000 version 1.0.013.001 Linksys RE9000 version 1.0.013.001 Linksys RE6250 version 1.0.04.001 Linksys RE6300 version 1.0.04.001 Linksys RE6350 version 1.0.04.001 Linksys RE6500 version 1.0.04.001 Linksys RE7000 version 1.0.04.001 Linksys RE9000 version 1.0.04.001 Linksys RE6250 version 1.0.04.002 Linksys RE6300 version 1.0.04.002 Linksys RE6350 version 1.0.04.002 Linksys RE6500 version 1.0.04.002 Linksys RE7000 version 1.0.04.002 Linksys RE9000 version 1.0.04.002 Linksys RE6250 version 1.1.05.003 Linksys RE6300 version 1.1.05.003 Linksys RE6350 version 1.1.05.003 Linksys RE6500 version 1.1.05.003 Linksys RE7000 version 1.1.05.003 Linksys RE9000 version 1.1.05.003 Linksys RE6250 version 1.2.07.001 Linksys RE6300 version 1.2.07.001 Linksys RE6350 version 1.2.07.001 Linksys RE6500 version 1.2.07.001 Linksys RE7000 version 1.2.07.001 Linksys RE9000 version 1.2.07.001

Description: A stack-based buffer overflow issue exists in the portTriggerManageRule function within the file /goform/portTriggerManageRule. Manipulation of the triggerRuleName and schedule arguments can trigger the overflow. Remote exploitation is possible. The exploit has been publicly disclosed.

Recommendations: Linksys RE6250 versions prior to 1.0.013.001 Linksys RE6300 versions prior to 1.0.013.001 Linksys RE6350 versions prior to 1.0.013.001 Linksys RE6500 versions prior to 1.0.013.001 Linksys RE7000 versions prior to 1.0.013.001 Linksys RE9000 versions prior to 1.0.013.001 Linksys RE6250 versions prior to 1.0.04.001 Linksys RE6300 versions prior to 1.0.04.001 Linksys RE6350 versions prior to 1.0.04.001 Linksys RE6500 versions prior to 1.0.04.001 Linksys RE7000 versions prior to 1.0.04.001 Linksys RE9000 versions prior to 1.0.04.001 Linksys RE6250 versions prior to 1.0.04.002 Linksys RE6300 versions prior to 1.0.04.002 Linksys RE6350 versions prior to 1.0.04.002 Linksys RE6500 versions prior to 1.0.04.002 Linksys RE7000 versions prior to 1.0.04.002 Linksys RE9000 versions prior to 1.0.04.002 Linksys RE6250 versions prior to 1.1.05.003 Linksys RE6300 versions prior to 1.1.05.003 Linksys RE6350 versions prior to 1.1.05.003 Linksys RE6500 versions prior to 1.1.05.003 Linksys RE7000 versions prior to 1.1.05.003 Linksys RE9000 versions prior to 1.1.05.003 Linksys RE6250 versions prior to 1.2.07.001 Linksys RE6300 versions prior to 1.2.07.001 Linksys RE6350 versions prior to 1.2.07.001 Linksys RE6500 versions prior to 1.2.07.001 Linksys RE7000 versions prior to 1.2.07.001 Linksys RE9000 versions prior to 1.2.07.001

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-9363

Affected Products

Linksys Re6250

Linksys Re6300

Linksys Re6350

Linksys Ea6500

Linksys Re7000

Linksys Re9000

References · 14

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_31/31.md · Exploit, Deleted
• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_31/31.md#poc · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2025-9363 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9363 · Security Note
• https://t.me/cveNotify/133270 · Telegram Post
• https://vuldb.com/?submit.631535 · Note
• https://twitter.com/CVEnew/status/1959262369114366218 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1959264724874363312 · Twitter Post
• https://t.me/CVEtracker/30788 · Telegram Post
• https://vuldb.com/?ctiid.321066 · Note
• https://vuldb.com/?id.321066 · Note
• https://twitter.com/EnigmaSecurity_/status/1959418769912033425 · Twitter Post
• https://linksys.com · Note
• https://twitter.com/CveFindCom/status/1959256775632343409 · Twitter Post