CNNVD-202512-775 Information

CNNVD ID

CNNVD-202512-775

CVE-2025-14135

  • CNNVD Published: 2025-12-06

Description (Chinese)

Linksys RE6250等都是美国Linksys公司的一款无线扩展器。 Linksys多款产品存在安全漏洞,该漏洞源于对文件mod_form.so中参数clientsname_0的错误操作,可能导致栈缓冲区溢出。以下产品和版本受到影响:Linksys RE6500、RE6250、RE6300、RE6350、RE7000和RE9000 1.0.013.001版本、1.0.04.001版本、1.0.04.002版本、1.1.05.003版本和1.2.07.001版本。

Description (English)

Linksys RE6250, etc., are a wireless extension of the United States company Linksys. There is a safety gap in Linksys ’ multiple products, which stems from an error in the application of the parameter commentsname 0 in document mod form.so, which could lead to a spill over the fence. The following products and versions have been affected: Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE90000 Versions 1.0.013.001, 1.0.04.001, 1.0.04.002, 1.1.05.003 and 1.2.07.001.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Linksys

Published

2025-12-06

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.334524 https://www.linksys.com/ https://vuldb.com/?submit.697982 https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_64/64.md#poc https://vuldb.com/?id.334524 https://access.redhat.com/security/cve/cve-2025-14135

Share on: