PT-2025-46866 · Cisco · Cisco Linksys E1200 V2

Published 2025-10-09 · Updated 2025-12-17 · CVE-2025-60692

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Linksys E1200 v2 routers version E1200 v2.0.11.001 us.tar.gz

Description A stack-based buffer overflow issue exists in the libshared.so library of Cisco Linksys E1200 v2 routers. The get mac from ip() and get ip from mac() functions utilize the sscanf() function with an overly permissive format specifier ("%100s") when parsing entries from /proc/net/arp into fixed-size buffers. This allows a local attacker who controls the contents of /proc/net/arp to cause a stack buffer overflow, potentially leading to memory corruption, denial of service, or arbitrary code execution. The vulnerable functions do not validate input length against the fixed-size stack buffer.

Recommendations Update to a newer firmware version that addresses this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-14911

CVE-2025-60692

Affected Products

Cisco Linksys E1200 V2

References · 10

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-E1200/CVE-2025-60692.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-60692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60692 · Security Note
• https://bdu.fstec.ru/vul/2025-14911 · Security Note
• https://t.me/CVEtracker/37262 · Telegram Post
• http://linksys.com · Note
• https://twitter.com/hackyboiz/status/2001275236503982533 · Twitter Post
• https://twitter.com/cracbot/status/1990736823216452044 · Twitter Post
• https://linksys.com · Note
• https://twitter.com/VulmonFeeds/status/1989122953447879075 · Twitter Post