CVE-2025-8832

Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function setDMZ of the file /goform/setDMZ. The manipulation of the argument DMZIPAddress leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Das betrifft die Funktion setDMZ der Datei /goform/setDMZ. Durch die Manipulation des Arguments DMZIPAddress mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.

Affected

Linksys · RE6250 · RE6300 · RE6350 · RE6500 · RE7000 · RE9000

CVSS v4.0 VULDB

7.4 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULDB

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 VULDB

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

1.09% chance of exploitation in the next 30 days, 65th percentile

Published

2025-08-11

Proof-of-concept exploits (1)

• wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.md27★ · 2026-09-15

Security advisories

• https://vuldb.com/?id.319366
• https://vuldb.com/?submit.626697
• https://www.linksys.com

References

• CVE Record
• NVD entry