CVE-2025-8829 — Command Injection in Linksys Re6250

CWE-77 — Command InjectionCWE-78 — OS Command Injection4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.5%
top 34.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Linksys Re6250Linksys Re6300Linksys Re6350+9 more
Timeline
PublishedAug 11

Description

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function um_red of the file /goform/RP_setBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages12 packages

▶CVEListV5linksys/re625020250801
▶CVEListV5linksys/re630020250801
▶CVEListV5linksys/re635020250801
▶CVEListV5linksys/re650020250801
▶CVEListV5linksys/re700020250801

🔴Vulnerability Details

3
CVEList
Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection↗2025-08-11
▶
GHSA
GHSA-vxc7-j724-6qrx: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801↗2025-08-11
▶
VulnCheck
linksys re6250_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')↗2025
▶
CVE-2025-8829 — Command Injection in Linksys Re6250 | cvebase