Stack-Based Buffer Overflow in Linksys E1200 v2 Router Firmware

CVE-2025-60694

What is CVE-2025-60694?

The Linksys E1200 v2 router firmware contains a vulnerability in the validate_static_route function of the httpd binary, leading to a stack-based buffer overflow. This vulnerability is caused by insufficient boundary checks while handling user-supplied CGI parameters which are concatenated into fixed-size buffers. Attackers can exploit this flaw by sending specially crafted HTTP requests, allowing them to execute arbitrary code or induce a denial-of-service condition without requiring authentication. Users are strongly advised to update their firmware to mitigate potential security risks.

References