CVE-2025-5447: Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection
A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter. The manipulation of the argument apselect%d/newaptext%d leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5447?
CVE-2025-5447 has been declared as critical severity due to its potential impact on device security.
Which devices are affected by CVE-2025-5447?
CVE-2025-5447 affects Linksys RE6500, RE6250, RE6300, RE6350, RE7000, and RE9000 routers.
How do I fix CVE-2025-5447?
To fix CVE-2025-5447, update the firmware of your affected Linksys devices to the latest version provided by the manufacturer.
What does CVE-2025-5447 affect specifically?
CVE-2025-5447 affects the ssid1MACFilter function located in the /goform/ssid1MACFilter file.
Can CVE-2025-5447 be exploited remotely?
Yes, CVE-2025-5447 can be exploited remotely, making it crucial to apply patches immediately.