PT-2025-34767 · Linksys · Linksys Re6250+5

Bond_Yes · Published 2025-08-26 · Updated 2025-08-26 · CVE-2025-9482

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linksys RE6250 version 1.0.013.001 Linksys RE6300 version 1.0.013.001 Linksys RE6350 version 1.0.013.001 Linksys RE6500 version 1.0.013.001 Linksys RE7000 version 1.0.013.001 Linksys RE9000 version 1.0.013.001 Linksys RE6250 version 1.0.04.001 Linksys RE6300 version 1.0.04.001 Linksys RE6350 version 1.0.04.001 Linksys RE6500 version 1.0.04.001 Linksys RE7000 version 1.0.04.001 Linksys RE9000 version 1.0.04.001 Linksys RE6250 version 1.0.04.002 Linksys RE6300 version 1.0.04.002 Linksys RE6350 version 1.0.04.002 Linksys RE6500 version 1.0.04.002 Linksys RE7000 version 1.0.04.002 Linksys RE9000 version 1.0.04.002 Linksys RE6250 version 1.1.05.003 Linksys RE6300 version 1.1.05.003 Linksys RE6350 version 1.1.05.003 Linksys RE6500 version 1.1.05.003 Linksys RE7000 version 1.1.05.003 Linksys RE9000 version 1.1.05.003 Linksys RE6250 version 1.2.07.001 Linksys RE6300 version 1.2.07.001 Linksys RE6350 version 1.2.07.001 Linksys RE6500 version 1.2.07.001 Linksys RE7000 version 1.2.07.001 Linksys RE9000 version 1.2.07.001

Description: A stack-based buffer overflow exists in the portRangeForwardAdd function within the /goform/portRangeForwardAdd file. Manipulation of the ruleName, schedule, inboundFilter, TCPPorts, and UDPPorts arguments can trigger the overflow. This issue is remotely exploitable. The exploit is publicly available.

Recommendations: Linksys RE6250 version 1.0.013.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6300 version 1.0.013.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6350 version 1.0.013.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6500 version 1.0.013.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE7000 version 1.0.013.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE9000 version 1.0.013.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6250 version 1.0.04.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6300 version 1.0.04.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6350 version 1.0.04.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6500 version 1.0.04.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE7000 version 1.0.04.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE9000 version 1.0.04.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6250 version 1.0.04.002: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6300 version 1.0.04.002: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6350 version 1.0.04.002: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6500 version 1.0.04.002: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE7000 version 1.0.04.002: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE9000 version 1.0.04.002: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6250 version 1.1.05.003: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6300 version 1.1.05.003: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6350 version 1.1.05.003: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6500 version 1.1.05.003: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE7000 version 1.1.05.003: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE9000 version 1.1.05.003: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6250 version 1.2.07.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6300 version 1.2.07.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6350 version 1.2.07.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE6500 version 1.2.07.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE7000 version 1.2.07.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys RE9000 version 1.2.07.001: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-9482

Affected Products

Linksys Re6250

Linksys Re6300

Linksys Re6350

Linksys Ea6500

Linksys Re7000

Linksys Re9000

References · 13

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_36/36.md#poc · Exploit, Deleted
• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_36/36.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2025-9482 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9482 · Security Note
• https://vuldb.com/?submit.634820 · Note
• https://linksys.com · Note
• https://twitter.com/ZeroPathLabs/status/1960359595999703483 · Twitter Post
• https://vuldb.com/?id.321397 · Note
• https://vuldb.com/?ctiid.321397 · Note
• https://twitter.com/VulmonFeeds/status/1960360981948768550 · Twitter Post
• https://twitter.com/CveFindCom/status/1960344162525487321 · Twitter Post
• https://t.me/CVEtracker/30929 · Telegram Post
• https://twitter.com/CVEnew/status/1960342722663076253 · Twitter Post