PT-2025-34766 · Linksys · Re6250 +5

Bond_Yes · Published 2025-08-26 · Updated 2025-08-26 · CVE-2025-9481

NVD

CVSS v2.0

9.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function setIpv6 of the file /goform/setIpv6. The manipulation of the argument tunrd Prefix leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-9481

Affected Products

Re6250

Re6300

Re6350

Rse6500

Re7000

Re9000

References · 7

• 🔥 https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_35/35.md#poc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9481 · Security Note
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_35/35.md · Note
• https://vuldb.com/?id.321396 · Note
• https://vuldb.com/?ctiid.321396 · Note
• https://linksys.com · Note
• https://vuldb.com/?submit.634819 · Note