CVE-2025-9248

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RP_pingGatewayByBBS of the file /goform/RP_pingGatewayByBBS. The manipulation of the argument ssidhex results in stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-119
• CWE-121

• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_17/17.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.320779Permissions Required
• https://vuldb.com/?id.320779Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.631521Third Party Advisory, VDB Entry
• https://www.linksys.com/Product
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_17/17.mdExploit, Third Party Advisory

Published

Aug 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9242An Out-of-bounds Write vulnerability in the WatchGuard Firew…9.8
• CVE-2025-9243The Cost Calculator Builder plugin for WordPress is vulnerab…8.1
• CVE-2025-9244A security vulnerability has been detected in Linksys RE6250…8.8
• CVE-2025-9245A vulnerability was detected in Linksys RE6250, RE6300, RE63…8.8
• CVE-2025-9246A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6…8.8
• CVE-2025-9247A vulnerability has been found in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9249A vulnerability was determined in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9250A vulnerability was identified in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9251A security flaw has been discovered in Linksys RE6250, RE630…8.8
• CVE-2025-9252A weakness has been identified in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9253A security vulnerability has been detected in Linksys RE6250…8.8
• CVE-2025-9254WebITR developed by Uniong has a Missing Authentication vuln…9.8