CVE 8.7 HIGH

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wired_clientlist_setClientsName stack-based overflow_CVE-2025-14135

8.7 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function AP_get_wired_clientlist_setClientsName of the file mod_form.so. The manipulation of the argument clientsname_0 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AI Analysis

AI processing failed - invalid JSON response

Basic Information

ID CVE-2025-14135
Source VulDB
Published Dec 6, 2025 at 11:32

Affected Product

Vendor Linksys
Product RE6500
Version 1.0.013.001
Affected Versions Linksys RE6500 1.0.013.001
Linksys RE6500 1.0.04.001
Linksys RE6500 1.0.04.002
Linksys RE6500 1.1.05.003
Linksys RE6500 1.2.07.001
Linksys RE6250 1.0.013.001
Linksys RE6250 1.0.04.001
Linksys RE6250 1.0.04.002
Linksys RE6250 1.1.05.003
Linksys RE6250 1.2.07.001
Linksys RE6300 1.0.013.001
Linksys RE6300 1.0.04.001
Linksys RE6300 1.0.04.002
Linksys RE6300 1.1.05.003
Linksys RE6300 1.2.07.001
Linksys RE6350 1.0.013.001
Linksys RE6350 1.0.04.001
Linksys RE6350 1.0.04.002
Linksys RE6350 1.1.05.003
Linksys RE6350 1.2.07.001
Linksys RE7000 1.0.013.001
Linksys RE7000 1.0.04.001
Linksys RE7000 1.0.04.002
Linksys RE7000 1.1.05.003
Linksys RE7000 1.2.07.001
Linksys RE9000 1.0.013.001
Linksys RE9000 1.0.04.001
Linksys RE9000 1.0.04.002
Linksys RE9000 1.1.05.003
Linksys RE9000 1.2.07.001

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.