CVE-2025-9363: Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portTriggerManageRule stack-based overflow
A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function portTriggerManageRule of the file /goform/portTriggerManageRule. The manipulation of the argument triggerRuleName/schedule leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9363?
The severity of CVE-2025-9363 is classified as high due to potential unauthorized access risks.
How do I fix CVE-2025-9363?
To fix CVE-2025-9363, update your Linksys device firmware to the latest version provided by the manufacturer.
Which devices are affected by CVE-2025-9363?
CVE-2025-9363 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 devices.
What is the nature of the vulnerability in CVE-2025-9363?
CVE-2025-9363 is related to the improper handling of port triggering rules in specific Linksys router models.
How can CVE-2025-9363 be exploited?
CVE-2025-9363 can be exploited by an attacker manipulating the triggerRule argument in the portTriggerManageRule function.