CNNVD-202508-880 Information

CNNVD ID

CNNVD-202508-880

CVE-2025-8817

  • CNNVD Published: 2025-08-10

Description (Chinese)

Linksys RE6250等都是美国Linksys公司的一款无线扩展器。 Linksys多款产品存在安全漏洞,该漏洞源于文件/goform/setLan中函数setLan参数lan2enabled导致栈缓冲区溢出,可能导致远程攻击。以下产品及版本受到影响:RE6250、RE6300、RE6350、RE6500、RE7000和RE9000 20250801及之前版本。

Description (English)

Linksys RE6250, etc., are a wireless extension of the United States company Linksys. There is a safety loophole in Linksys ’ multiple products, which stems from the fact that the setLan parameter in the file/goform/setLan has led to the spilling out of the barrage, which could lead to a long-range attack. The following products and versions were affected: RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 20250801 and earlier.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Linksys

Published

2025-08-10

Last Modified

2026-02-24

References

https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_51/51.md https://vuldb.com/?submit.626681 https://www.linksys.com/ https://vuldb.com/?id.319351 https://vuldb.com/?ctiid.319351 https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_51/51.md#poc https://access.redhat.com/security/cve/cve-2025-8817

Share on: