Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-9357: Linksys Router Firmware: Remote Attack Through Malicious Input

CVE-2025-9357 · published 1 year ago

Summary

A security flaw in Linksys router firmware allows an attacker to potentially take control of the router from a distance. This could lead to a range of malicious activities, such as intercepting internet traffic or disrupting the router's operation. Affected models include RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000. Update the firmware to the latest version to address this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
linksys	re6250_firmware	1.0.04.001 `cpe:2.3:o:linksys:re6250_firmware:1.0.04.001:::::::*`
linksys	re6300_firmware	1.2.07.001 `cpe:2.3:o:linksys:re6300_firmware:1.2.07.001:::::::*`
linksys	re6350_firmware	1.0.04.001 `cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:::::::*`
linksys	re7000_firmware	1.1.05.003 `cpe:2.3:o:linksys:re7000_firmware:1.1.05.003:::::::*`
linksys	re9000_firmware	1.0.04.002 `cpe:2.3:o:linksys:re9000_firmware:1.0.04.002:::::::*`
linksys	re6500_firmware	1.0.013.001 `cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:::::::*`

Original advisory text

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function langSwitchByBBS of the file /goform/langSwitchByBBS. The manipulation of the argument langSelectionOnly leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_25/25.md Exploit Third Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_25/25.md#poc Exploit Third Party Advisory
https://vuldb.com/?ctiid.321060 Permissions Required
https://vuldb.com/?id.321060 Third Party Advisory VDB Entry
https://vuldb.com/?submit.631529 Third Party Advisory VDB Entry
https://www.linksys.com/ Product

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.4 High

Exploitation

1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-121Stack-based Buffer Overflow

Timeline

Published23 Aug 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-9357 · NVD

Track software like this

Free during beta