CVE-2025-14133CWE-119CWE-121CWE-787

CVE-2025-14133

High · published December 6, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

⚡ Just a crafty argument away from chaos! A stack-based buffer overflow vulnerability in Linksys routers could let attackers remotely take control—yikes! 🌐 Think of this like a waiter at a restaurant who mistakenly serves a whole table the wrong order because they misread the ticket—suddenly, your dinner party is a complete mess. Similarly, this bug in the router takes a simple input and can overflow into places it shouldn’t, creating a huge problem! This vulnerability means that an attacker could potentially execute malicious code on the router, disrupting your entire home network. They could intercept your data, snoop on your activities, and even take control of devices connected to your Wi-Fi. Imagine someone hacking into your online life through your own router—absolutely devastating!

Put simply

Think of this like a waiter at a restaurant who mistakenly serves a whole table the wrong order because they misread the ticket—suddenly, your dinner party is a complete mess. Similarly, this bug in the router takes a simple input and can overflow into places it shouldn’t, creating a huge problem! The vulnerability arises in the function AP_get_wireless_clientlist_setClientsName within mod_form.so, where improper handling of the clientsname_0 argument leads to a stack-based buffer overflow. This flaw can be exploited remotely, which is particularly concerning for home network security.

What to do

This vulnerability means that an attacker could potentially execute malicious code on the router, disrupting your entire home network. They could intercept your data, snoop on your activities, and even take control of devices connected to your Wi-Fi. Imagine someone hacking into your online life through your own router—absolutely devastating! To protect yourself, immediately update your Linksys router to the latest firmware version provided by the vendor. Additionally, consider disabling remote management features if you're not using them, and regularly audit your connected devices for any suspicious activity. 🛡️ You've got this! Follow these steps, and you'll have your network secure in no time! 💪😊

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-12-06T16:15Z
Affected products (6)
ProductVersionsFixed in
linksys/re6500_firmwareall versions—
linksys/re6250_firmwareall versions—
linksys/re6300_firmwareall versions—
linksys/re6350_firmwareall versions—
linksys/re7000_firmwareall versions—
linksys/re9000_firmwareall versions—
References (8)
EPSS history
Timeline
  • 06 DEC 10:32Z
    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflow
    cvelistv5