CVE-2025-9359: Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_checkCredentialsByBBS stack-based overflow
A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RPcheckCredentialsByBBS of the file /goform/RPcheckCredentialsByBBS. This manipulation of the argument ssidhex/pwd causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9359?
CVE-2025-9359 has been designated as a high-severity vulnerability affecting specific Linksys router models.
How do I fix CVE-2025-9359?
To resolve CVE-2025-9359, update your Linksys router to the latest firmware version provided by the manufacturer.
Which Linksys models are affected by CVE-2025-9359?
CVE-2025-9359 affects the Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000.
What type of vulnerability is CVE-2025-9359?
CVE-2025-9359 is a credential verification vulnerability in the router's firmware.
How can I determine if my Linksys router is vulnerable to CVE-2025-9359?
You can determine if your Linksys router is vulnerable to CVE-2025-9359 by checking the firmware version against the affected versions listed by Linksys.