What’s Vulnerable › Vulnerabilities
CVE-2025-9356: Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflow
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-08-22 · updated 2026-06-17
- Weakness: CWE-119
Description
A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the argument ruleName can lead to stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
- Linksys Re6250 Firmware: 1.0.04.001
- Linksys Re6300 Firmware: 1.2.07.001
- Linksys Re6350 Firmware: 1.0.04.001
- Linksys Re6500 Firmware: 1.0.013.001
- Linksys Re7000 Firmware: 1.1.05.003
- Linksys Re9000 Firmware: 1.0.04.002
References
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md#poc
- https://vuldb.com/?ctiid.321059
- https://vuldb.com/?id.321059
- https://vuldb.com/?submit.631528
- https://www.linksys.com/
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md#poc
Get alerted when CVE-2025-9356 or the next vulnerability affects your stack