CVE-2025-9392

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function qosClassifier of the file /goform/qosClassifier. Such manipulation of the argument dir/sFromPort/sToPort/dFromPort/dToPort/protocol/layer7/dscp/remark_dscp leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-121

Affected software

Vendor	Product	Versions
Linksys	RE6250	1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001
Linksys	RE6300	1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001
Linksys	RE6350	1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001
Linksys	RE6500	1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001
Linksys	RE7000	1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001
Linksys	RE9000	1.0.013.001; 1.0.04.001; 1.0.04.002; 1.1.05.003; 1.2.07.001

References

https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_32/32.mdExploit, Third Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_32/32.md#pocExploit, Third Party Advisory
https://vuldb.com/?ctiid.321225Permissions Required
https://vuldb.com/?id.321225Third Party Advisory, VDB Entry
https://vuldb.com/?submit.631537Third Party Advisory, VDB Entry
https://www.linksys.com/Product
https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_32/32.mdExploit, Third Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_32/32.md#pocExploit, Third Party Advisory

Timeline

Published: Aug 24, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-93938.8A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.0 CVE-2025-93945.5A flaw has been found in PoDoFo 1.1.0-dev. This issue affects the function PdfTokenizer::DetermineDataType of the file src/podofo/main/PdfTo CVE-2025-93956.3A vulnerability was identified in wangsongyan wblog 0.0.1. This affects the function RestorePost of the file backup.go. Such manipulation of CVE-2025-93965.5A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l CVE-2025-93979.8A weakness has been identified in givanz Vvveb up to 1.0.7.2. Affected is an unknown function of the file /system/traits/media.php. Executin CVE-2025-93987.5A security vulnerability has been detected in YiFang CMS up to 2.0.5. Affected by this vulnerability is the function exportInstallTable of t CVE-2025-93998.8A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file app/logic/L_tool.ph CVE-2025-94008.8A flaw has been found in YiFang CMS up to 2.0.5. This affects the function mergeMultipartUpload of the file app/utils/base/plugin/P_file.php CVE-2025-94013.7A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php CVE-2025-94027.2A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php CVE-2025-94035.5A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Par CVE-2025-94045.4A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of th