CVE-2025-14135CWE-119CWE-121CWE-787

CVE-2025-14135

High · published December 6, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow can be triggered remotely in Linksys routers, leaving you wide open for an attack! 🔥 Think of it like a dinner party where an unwelcome guest sneaks in and starts messing with the seating arrangements — suddenly, everything goes haywire! This vulnerability allows attackers to exploit the router's function and potentially take control. If exploited, an attacker could manipulate the router's settings, leading to unauthorized access to your network. They could intercept sensitive data, hijack your internet connection, or even launch attacks on other devices connected to your network. Talk about a party crasher!

Put simply

Think of it like a dinner party where an unwelcome guest sneaks in and starts messing with the seating arrangements — suddenly, everything goes haywire! This vulnerability allows attackers to exploit the router's function and potentially take control. This vulnerability occurs in the function AP_get_wired_clientlist_setClientsName of the mod_form.so file, where improper handling of the argument clientsname_0 leads to a stack-based buffer overflow, allowing for remote code execution.

What to do

If exploited, an attacker could manipulate the router's settings, leading to unauthorized access to your network. They could intercept sensitive data, hijack your internet connection, or even launch attacks on other devices connected to your network. Talk about a party crasher! Update your Linksys router to the latest firmware version as soon as possible to patch this vulnerability. Review your network for any signs of unauthorized access, and consider changing your admin credentials to prevent further exploits. 🛡️ You’ve got this! Follow these steps, and you’ll keep your network safe and sound! 🔒🙌

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-12-06T17:15Z
Affected products (6)
ProductVersionsFixed in
linksys/re6500_firmwareall versions—
linksys/re6250_firmwareall versions—
linksys/re6300_firmwareall versions—
linksys/re6350_firmwareall versions—
linksys/re7000_firmwareall versions—
linksys/re9000_firmwareall versions—
References (8)
EPSS history
Timeline
  • 06 DEC 11:32Z
    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wired_clientlist_setClientsName stack-based overflow
    cvelistv5