CVE-2025-9483: A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function singlePortForwardAdd of the file...

Summary

A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function singlePortForwardAdd of the file /goform/singlePortForwardAdd. This manipulation of the argument ruleName/schedule/inboundFilter causes...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
linksys	re6500_firmware	1.0.013.001 `cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:::::::*`
linksys	re6250_firmware	1.0.04.001 `cpe:2.3:o:linksys:re6250_firmware:1.0.04.001:::::::*`
linksys	re6300_firmware	1.2.07.001 `cpe:2.3:o:linksys:re6300_firmware:1.2.07.001:::::::*`
linksys	re6350_firmware	1.0.04.001 `cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:::::::*`
linksys	re7000_firmware	1.1.05.003 `cpe:2.3:o:linksys:re7000_firmware:1.1.05.003:::::::*`
linksys	re9000_firmware	1.0.04.002 `cpe:2.3:o:linksys:re9000_firmware:1.0.04.002:::::::*`

Original advisory text

A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function singlePortForwardAdd of the file...

A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function singlePortForwardAdd of the file /goform/singlePortForwardAdd. This manipulation of the argument ruleName/schedule/inboundFilter causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

https://vuldb.com/?ctiid.321398 Permissions Required
https://vuldb.com/?id.321398 Third Party Advisory VDB Entry
https://vuldb.com/?submit.634823 Third Party Advisory VDB Entry
https://www.linksys.com/ Product
https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_37/37.md Exploit Third Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_37/37.md#poc Exploit Third Party Advisory