CVE-2025-60695: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the mtkdut binary of Linksys E7350 routers (Firmware 1.1.00.032). The function sub4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary checks. Since a1 is often allocated with significantly smaller sizes (20-32 bytes), local attackers controlling the contents of /sys/class/net/%s/address can trigger buffer overflows, leading to memory corruption, denial of service, or potential arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60695?
CVE-2025-60695 has a high severity rating due to the potential for remote code execution through the buffer overflow.
How do I fix CVE-2025-60695?
To fix CVE-2025-60695, update the firmware of your Linksys E7350 router to the latest version that addresses this vulnerability.
What systems are affected by CVE-2025-60695?
CVE-2025-60695 affects Linksys E7350 routers running firmware version 1.1.00.032.
What attacks can exploit CVE-2025-60695?
CVE-2025-60695 can be exploited to execute arbitrary code on the device, potentially allowing attackers to take full control.
Is CVE-2025-60695 easy to exploit?
CVE-2025-60695 can be relatively easy to exploit due to the lack of input validation in the strcpy function used in the vulnerable code.