CVE-2025-25522
Last modified
CVE-2025-25522 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linksys | Wap610n Firmware | 1.0.05.002 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-25522?
How severe is CVE-2025-25522?
How do I fix CVE-2025-25522?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-25516Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog…9.8
- CVE-2025-25517Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib…9.8
- CVE-2025-25519Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.ph…9.8
- CVE-2025-2552A vulnerability was found in D-Link DIR-618 and DIR-605L 2.0…5.3
- CVE-2025-25520Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php…9.8
- CVE-2025-25521Seacms <=13.3 is vulnerable to SQL Injection in admin_type_n…9.8
- CVE-2025-25523Buffer overflow vulnerability in Trendnet TEG-40128 Web Smar…5.9
- CVE-2025-25524Buffer overflow vulnerability in TOTOLink X6000R routers V9.…5.1
- CVE-2025-25525Buffer overflow vulnerability in H3C FA3010L access points S…5.1
- CVE-2025-25526Buffer overflow vulnerability in Mercury MIPC552W Camera v1.…5.1
- CVE-2025-25527Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway …5.1
- CVE-2025-25528Multiple buffer overflow vulnerabilities in Wavlink WL-WN575…5.1
Are you affected by CVE-2025-25522?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST