CVE-2025-9146: Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption
A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verifygemtekheader of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9146?
CVE-2025-9146 is classified as a high severity vulnerability due to its potential to enable remote exploitation of cryptographic weaknesses.
How do I fix CVE-2025-9146?
To mitigate CVE-2025-9146, it is recommended to update your Linksys E5600 firmware to the latest version provided by the manufacturer.
What systems are affected by CVE-2025-9146?
CVE-2025-9146 affects Linksys E5600 routers running firmware version 1.1.0.26.
What type of vulnerability is CVE-2025-9146?
CVE-2025-9146 is a cryptographic vulnerability that can be exploited through remote command execution.
Can CVE-2025-9146 be exploited remotely?
Yes, CVE-2025-9146 can be exploited remotely, allowing attackers to manipulate cryptographic processes.