CVE-2025-60692

A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz)

High · published November 13, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

⚡ Local attackers could exploit a stack-based buffer overflow right in your Cisco Linksys E1200 v2 router! Just a few crafty bytes could lead to memory corruption or even arbitrary code execution. 🔥 Think of it like a restaurant that serves portions with no limits. If the chef misunderstands an order and doubles the size, the kitchen could spill over, causing chaos instead of serving a delicious meal. Similarly, this vulnerability allows attackers to fill up the stack until it overflows and wreaks havoc! This means that an attacker could potentially crash the router, leading to a denial of service, or even execute their own code, gaining unauthorized access to the network. Imagine a dinner party where someone swaps out the menu, serving up chaos instead of the scheduled feast!

Put simply

Think of it like a restaurant that serves portions with no limits. If the chef misunderstands an order and doubles the size, the kitchen could spill over, causing chaos instead of serving a delicious meal. Similarly, this vulnerability allows attackers to fill up the stack until it overflows and wreaks havoc! The vulnerability stems from the libshared.so library in Cisco Linksys E1200 v2 routers, where the functions get_mac_from_ip and get_ip_from_mac use overly permissive format specifiers in sscanf, allowing local attackers to overflow fixed-size buffers.

What to do

This means that an attacker could potentially crash the router, leading to a denial of service, or even execute their own code, gaining unauthorized access to the network. Imagine a dinner party where someone swaps out the menu, serving up chaos instead of the scheduled feast! To secure your routers, update to the latest firmware version E1200_v2.0.11.002_us.tar.gz as soon as it is available. In the meantime, limit access to trusted users and monitor /proc/net/arp for any unusual modifications. 🛡️ You've got this! With a little vigilance and timely updates, you can keep your network safe and sound. 🌟

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2025-11-13T00:00Z
EPSS history
Timeline
  • 13 NOV 00:00Z
    A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz)
    cvelistv5