Stack-Based Buffer Overflow in Linksys RE Series Routers
CVE-2025-8816

8.7HIGH

Key Information:

Vendor: Linksys
Status: Re6250; Re6300; Re6350; Re6500
Vendor: CVE Published:; 10 August 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-8816?

A stack-based buffer overflow vulnerability has been identified in multiple models of Linksys RE series routers, including the RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000. The issue stems from the setOpMode function located in the /goform/setOpMode file. Attackers may exploit this vulnerability remotely by manipulating the ethConv argument, potentially leading to unauthorized access or control over the affected devices. Despite early disclosure of this vulnerability to the vendor, no response was received, raising concerns about the security of these devices in use.

Affected Version(s)

RE6250 20250801

RE6300 20250801

RE6350 20250801

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-8816 - Proof of Concept