PT-2025-46867 · Linksys · Linksys Re7000

Published 2025-11-13 · Updated 2025-12-08 · CVE-2025-60696

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys RE7000 routers versions FW v2.0.15 211230 1012

Description A stack-based buffer overflow issue exists in the makeRequest.cgi binary. The arplookup function parses lines from /proc/net/arp using sscanf("%16s ... %18s ..."), storing results into buffers v6 (12 bytes) and v7 (20 bytes). The format specifiers allow oversized input, leading to buffer overflows and potential stack corruption. Local attackers who can control the contents of /proc/net/arp may be able to cause a denial of service or potentially execute arbitrary code.

Recommendations Update to a newer firmware version that addresses this vulnerability. As a temporary workaround, restrict access to the /proc/net/arp file to minimize the risk of exploitation.

Exploit

Fix

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-60696

Affected Products

Linksys Re7000

References · 9

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-RE700/CVE-2025-60696.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-60696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60696 · Security Note
• http://linksys.com · Note
• https://twitter.com/VulmonFeeds/status/1989117833343607280 · Twitter Post
• https://t.me/cveNotify/145124 · Telegram Post
• https://t.me/CVEtracker/37265 · Telegram Post
• https://twitter.com/cracbot/status/1990736826995560701 · Twitter Post
• https://linksys.com · Note