CVE-2025-9249

CWE-119 — Buffer OverflowCWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
7.4HIGH
EPSS
0.2%
top 51.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Linksys Re6250Linksys Re6300Linksys Re6350+9 more
Timeline
PublishedAug 20

Description

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function DHCPReserveAddGroup of the file /goform/DHCPReserveAddGroup. This manipulation of the argument enable_group/name_group/ip_group/mac_group causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this …

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages12 packages

▶CVEListV5linksys/re62505 versions+4
▶CVEListV5linksys/re63005 versions+4
▶CVEListV5linksys/re63505 versions+4
▶CVEListV5linksys/re65005 versions+4
▶CVEListV5linksys/re70005 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-m2q4-w6wf-rf6w: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1↗2025-08-20
▶
CVEList
Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DHCPReserveAddGroup stack-based overflow↗2025-08-20
▶
CVE-2025-9249 (HIGH CVSS 7.4) | A vulnerability was determined in L | cvebase.io