Description
A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function urlFilterManageRule of the file /goform/urlFilterManageRule. Executing manipulation of the argument urlFilterRuleName/scheduleUrl/addURLFilter can lead to stack-based buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linksys | RE6250 | 1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001 |
| Linksys | RE6300 | 1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001 |
| Linksys | RE6350 | 1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001 |
| Linksys | RE6500 | 1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001 |
| Linksys | RE7000 | 1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001 |
| Linksys | RE9000 | 1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001 |
References
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_30/30.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.321065Permissions Required
- https://vuldb.com/?id.321065Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.631534Third Party Advisory, VDB Entry
- https://www.linksys.com/Product
Timeline
- Published
- Aug 23, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed