CVE-2025-9360: Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflow
A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function accessControlAdd of the file /goform/accessControlAdd. Such manipulation of the argument ruleName/schedule leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9360?
CVE-2025-9360 is classified as a high severity vulnerability due to potential unauthorized access and control.
How do I fix CVE-2025-9360?
To fix CVE-2025-9360, update your Linksys device firmware to the latest version as provided by Linksys.
Which devices are affected by CVE-2025-9360?
CVE-2025-9360 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 models.
What can be exploited in CVE-2025-9360?
CVE-2025-9360 can be exploited through manipulation of the argument ruleName in the accessControlAdd function.
Is CVE-2025-9360 a remote vulnerability?
Yes, CVE-2025-9360 is a remote vulnerability allowing attackers to gain unauthorized access to the affected devices.