CVE-2025-5446: Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injection
A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been classified as critical. This affects the function RPcheckCredentialsByBBS of the file /goform/RPcheckCredentialsByBBS. The manipulation of the argument pwd leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5446?
CVE-2025-5446 has been classified as critical.
Which devices are affected by CVE-2025-5446?
CVE-2025-5446 affects Linksys RE6500, RE6250, RE6300, RE6350, RE7000, and RE9000 models running specific firmware versions.
How do I fix CVE-2025-5446?
To fix CVE-2025-5446, update the firmware of the affected Linksys devices to the latest version.
What specific function is exploited in CVE-2025-5446?
CVE-2025-5446 exploits the function RP_checkCredentialsByBBS in the /goform/RP_checkCredentialsByBBS file.
What are the consequences of exploiting CVE-2025-5446?
Exploiting CVE-2025-5446 could allow unauthorized access to the device's management interface.