Metrics
Affected Vendors & Products
Tue, 02 Sep 2025 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Linksys re6250 Firmware
Linksys re6300 Firmware Linksys re6350 Firmware Linksys re6500 Firmware Linksys re7000 Firmware Linksys re9000 Firmware |
|
CPEs | cpe:2.3:h:linksys:re6250:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6300:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6350:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re6500:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re7000:-:*:*:*:*:*:*:* cpe:2.3:h:linksys:re9000:-:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6250_firmware:1.0.04.001:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6300_firmware:1.2.07.001:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:*:*:*:*:*:*:* cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:*:*:*:*:*:*:* cpe:2.3:o:linksys:re7000_firmware:1.1.05.003:*:*:*:*:*:*:* cpe:2.3:o:linksys:re9000_firmware:1.0.04.002:*:*:*:*:*:*:* |
|
Vendors & Products |
Linksys re6250 Firmware
Linksys re6300 Firmware Linksys re6350 Firmware Linksys re6500 Firmware Linksys re7000 Firmware Linksys re9000 Firmware |
Thu, 21 Aug 2025 12:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Linksys
Linksys re6250 Linksys re6300 Linksys re6350 Linksys re6500 Linksys re7000 Linksys re9000 |
|
Vendors & Products |
Linksys
Linksys re6250 Linksys re6300 Linksys re6350 Linksys re6500 Linksys re7000 Linksys re9000 |
Wed, 20 Aug 2025 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 20 Aug 2025 19:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function addStaticRoute of the file /goform/addStaticRoute. Such manipulation of the argument staticRoute_IP_setting/staticRoute_Netmask_setting/staticRoute_Gateway_setting/staticRoute_Metric_setting/staticRoute_destType_setting leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | |
Title | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaticRoute os command injection | |
Weaknesses | CWE-77 CWE-78 |
|
References |
| |
Metrics |
cvssV2_0
|

Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2025-08-20T20:16:52.674Z
Reserved: 2025-08-20T11:16:31.303Z
Link: CVE-2025-9244

Updated: 2025-08-20T20:16:45.759Z

Status : Analyzed
Published: 2025-08-20T20:15:33.837
Modified: 2025-09-02T18:22:11.720
Link: CVE-2025-9244

No data.

Updated: 2025-08-21T12:30:46Z