Stack-based Buffer Overflow in Cisco Linksys E1200 Router Firmware

CVE-2025-60692

What is CVE-2025-60692?

A stack-based buffer overflow vulnerability is present in the libshared.so library of Cisco Linksys E1200 v2 routers. The affected functions, get_mac_from_ip and get_ip_from_mac, utilize the sscanf function with overly permissive format specifiers to handle data from /proc/net/arp. This design flaw allows local attackers to manipulate the contents of the ARP table, leading to potential stack buffer overflows. Consequently, this could result in memory corruption, denial of service, or the ability to execute arbitrary code remotely.

References