CVE-2025-60694

A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (Firmware…

High · published November 13, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow in Linksys E1200 routers could let attackers dance right into your network! 💃 Think of the validate_static_route function as a chef who doesn’t check the size of ingredients before tossing them into a pot. If the chef adds too much, the pot overflows, potentially spilling hot soup everywhere—just like how the buffer can overflow, spilling out control to the attacker! An attacker can remotely send crafted HTTP requests that execute arbitrary code, giving them the keys to your router kingdom! This could lead to unauthorized access to your network or even a complete denial of service, leaving your internet connection as effective as a paperweight!

Put simply

Think of the validate_static_route function as a chef who doesn’t check the size of ingredients before tossing them into a pot. If the chef adds too much, the pot overflows, potentially spilling hot soup everywhere—just like how the buffer can overflow, spilling out control to the attacker! This vulnerability stems from improper concatenation of user-supplied CGI parameters into fixed-size buffers within the httpd binary on vulnerable Linksys E1200 routers. The lack of bounds checking makes it possible for an attacker to overflow the stack and execute malicious code.

What to do

An attacker can remotely send crafted HTTP requests that execute arbitrary code, giving them the keys to your router kingdom! This could lead to unauthorized access to your network or even a complete denial of service, leaving your internet connection as effective as a paperweight! To protect your network, immediately update your Linksys E1200 router firmware to the latest version (E1200_v2.0.11.001_us.tar.gz). Regularly check for updates and consider implementing firewall rules to limit access to your router’s HTTP interface from untrusted networks. You've got this! By taking these steps, you'll be one step closer to securing your router and keeping your network safe. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01221 · 68.5th percentile
Published
2025-11-13T00:00Z
EPSS history
Timeline
  • 13 NOV 00:00Z
    A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (Firmware…
    cvelistv5