216.73.217.22

CVE-2025-9392

· Published 24/08/2025 15:15 · Modified 24/08/2025 15:15

Labels: CVE-2025-9392 2025-08-24CVE-2025-9392CWE-119[email protected]

Essential information

Published
24/08/2025 15:15
Modified
24/08/2025 15:15
Author
—
Creator
—
CVSS
7.4 HIGH (v3) 7.4 HIGH (v4.0)
CISA KEV
No
CWE
—
CVSS vector
—

CVSS metrics

Description

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function qosClassifier of the file /goform/qosClassifier. Such manipulation of the argument dir/sFromPort/sToPort/dFromPort/dToPort/protocol/layer7/dscp/remark_dscp leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
linksys / linksys re6250 cpe:2.3:a:linksys:linksys_re6250:1.0.013.001:*:*:*:*:*:*:*
linksys / linksys re6300 cpe:2.3:a:linksys:linksys_re6300:1.0.04.001:*:*:*:*:*:*:*
linksys / linksys re6350 cpe:2.3:a:linksys:linksys_re6350:1.0.04.002:*:*:*:*:*:*:*
linksys / linksys re6500 cpe:2.3:a:linksys:linksys_re6500:1.1.05.003:*:*:*:*:*:*:*
linksys / linksys re7000 cpe:2.3:a:linksys:linksys_re7000:1.2.07.001:*:*:*:*:*:*:*
linksys / linksys re9000 cpe:2.3:a:linksys:linksys_re9000:1.2.07.001:*:*:*:*:*:*:*

References