CVE-2025-60696

A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_v2.0.15_211230_1012)

High · published November 13, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

⚡ A sneaky stack-based buffer overflow in Linksys RE7000 routers could let local attackers craft oversized input to cause chaos! 🔥 Think of this vulnerability like a suitcase that can only hold a certain amount of clothes. If someone tries to stuff in too many items, it spills over, potentially causing a mess all around. In this case, the overflow can lead to critical stack corruption! If exploited, attackers could not only crash the router, denying users access to their network, but they might also execute arbitrary code. This could open the door to full control over the device, leading to devastating consequences for your home network security!

Put simply

Think of this vulnerability like a suitcase that can only hold a certain amount of clothes. If someone tries to stuff in too many items, it spills over, potentially causing a mess all around. In this case, the overflow can lead to critical stack corruption! The vulnerability in the makeRequest.cgi binary occurs when the arplookup function improperly handles oversized input, allowing local attackers to corrupt the stack. This happens because the input buffer sizes are not correctly enforced, leading to a malicious overflow.

What to do

If exploited, attackers could not only crash the router, denying users access to their network, but they might also execute arbitrary code. This could open the door to full control over the device, leading to devastating consequences for your home network security! To protect yourself, patch your Linksys RE7000 router firmware immediately to FW_v2.0.15_211230_1012. It's crucial to ensure that your router only processes validated input and to monitor for any suspicious activity. Don't forget to review your local network's security settings! You've got this! By taking these steps, you're one step closer to securing your network like a true hero! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2025-11-13T00:00Z
EPSS history
Timeline
  • 13 NOV 00:00Z
    A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_v2.0.15_211230_1012)
    cvelistv5