CVE-2025-14136CWE-119CWE-121CWE-787

CVE-2025-14136

High · published December 6, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in multiple Linksys router models could allow an attacker to remotely execute malicious code! 🔥 Think of it like a waiter at your favorite restaurant who doesn't check the order before delivering it — they might serve you something unexpected that could ruin your meal (or your network security). An attacker could exploit this vulnerability to take control of your router, potentially compromising all connected devices. They could intercept sensitive data, change your network settings, or even create a backdoor for future access. The consequences could be absolutely devastating!

Put simply

Think of it like a waiter at your favorite restaurant who doesn't check the order before delivering it — they might serve you something unexpected that could ruin your meal (or your network security). This vulnerability affects the RE2000v2Repeater_get_wired_clientlist_setClientsName function in the Linksys firmware, allowing manipulation of the clientsname_0 argument, leading to a stack-based buffer overflow.

What to do

An attacker could exploit this vulnerability to take control of your router, potentially compromising all connected devices. They could intercept sensitive data, change your network settings, or even create a backdoor for future access. The consequences could be absolutely devastating! To mitigate this issue, immediately update your Linksys router firmware to the latest version provided by the vendor. If you have a vulnerable model, check for patches at the Linksys support site and ensure to change your default login credentials to something secure. Regularly monitor your router settings too! You've got this! Follow these steps, and you'll secure your network in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01121 · 65.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-12-06T18:15Z
Affected products (6)
ProductVersionsFixed in
linksys/re6500_firmwareall versions—
linksys/re6250_firmwareall versions—
linksys/re6300_firmwareall versions—
linksys/re6350_firmwareall versions—
linksys/re7000_firmwareall versions—
linksys/re9000_firmwareall versions—
References (6)
EPSS history
Timeline
  • 06 DEC 13:02Z
    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflow
    cvelistv5