CVE-2025-60693: Buffer Overflow
A stack-based buffer overflow exists in the getmergemac function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200v2.0.11.001us.tar.gz). The function concatenates up to six user-supplied CGI parameters matching <parameter>0~5 into a fixed-size buffer (a2) without proper bounds checking, appending colon delimiters during concatenation. Remote attackers can exploit this vulnerability via specially crafted HTTP requests to execute arbitrary code or cause denial of service without authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60693?
CVE-2025-60693 has a high severity due to its potential to cause remote code execution through a stack-based buffer overflow.
How do I fix CVE-2025-60693?
To fix CVE-2025-60693, update the Linksys E1200 router firmware to the latest version that addresses this vulnerability.
What devices are affected by CVE-2025-60693?
CVE-2025-60693 specifically affects the Linksys E1200 v2 routers running the firmware E1200_v2.0.11.001_us.
Can CVE-2025-60693 be exploited remotely?
Yes, CVE-2025-60693 can be exploited remotely due to improper handling of user-supplied CGI parameters.
What are the potential impacts of CVE-2025-60693?
The potential impacts of CVE-2025-60693 include unauthorized access, remote code execution, and potential system compromise.