216.73.217.22

CVE-2025-9360

· Published 23/08/2025 11:15 · Modified 23/08/2025 11:15

Labels: CVE-2025-9360 2025-08-23CVE-2025-9360CWE-119[email protected]

Essential information

Published
23/08/2025 11:15
Modified
23/08/2025 11:15
Author
—
Creator
—
CVSS
7.4 HIGH (v3) 7.4 HIGH (v4.0)
CISA KEV
No
CWE
—
CVSS vector
—

CVSS metrics

Description

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function accessControlAdd of the file /goform/accessControlAdd. Such manipulation of the argument ruleName/schedule leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
linksys / re6250 cpe:2.3:a:linksys:re6250:1.0.013.001:*:*:*:*:*:*:*
linksys / re6300 cpe:2.3:a:linksys:re6300:1.0.04.001:*:*:*:*:*:*:*
linksys / re6350 cpe:2.3:a:linksys:re6350:1.0.04.002:*:*:*:*:*:*:*
linksys / re6500 cpe:2.3:a:linksys:re6500:1.1.05.003:*:*:*:*:*:*:*
linksys / re7000 cpe:2.3:a:linksys:re7000:1.2.07.001:*:*:*:*:*:*:*
linksys / re9000 cpe:2.3:a:linksys:re9000:1.0.04.001:*:*:*:*:*:*:*

References