CVE-2025-5447

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter. The manipulation of the argument apselect_%d/newap_text_%d leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-77
• CWE-78
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_10/10.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.310786Permissions Required, VDB Entry
• https://vuldb.com/?id.310786Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.584369Third Party Advisory, VDB Entry
• https://www.linksys.com/Product

Published

Jun 2, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54464This vulnerability exists in ZKTeco WL20 due to storage of a…7
• CVE-2025-54465This vulnerability exists in ZKTeco WL20 due to hard-coded M…6.8
• CVE-2025-54466Improper Control of Generation of Code ('Code Injection') vu…9.8
• CVE-2025-54467When a Java command with password parameters is executed and…5.3
• CVE-2025-54468A vulnerability has been identified within Rancher Manager w…4.7
• CVE-2025-54469A vulnerability was identified in NeuVector, where the enfor…9.9
• CVE-2025-54470This vulnerability affects NeuVector deployments only when t…8.6
• CVE-2025-54471NeuVector used a hard-coded cryptographic key embedded in th…6.5
• CVE-2025-54472Unlimited memory allocation in redis protocol parser in Apac…7.5
• CVE-2025-54473An authenticated RCE vulnerability in Phoca Commander compon…9.2
• CVE-2025-54474A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.…8.5
• CVE-2025-54475A SQL injection vulnerability in the JS Jobs plugin versions…8.7