Stack-Based Buffer Overflow in Linksys Wireless Extenders
CVE-2025-8822
Key Information:
Badges
What is CVE-2025-8822?
A vulnerability has been detected in Linksys wireless extenders which manifests as a stack-based buffer overflow in the algDisable function of the /goform/setOpMode file. By manipulating the opMode parameter, an attacker can exploit this vulnerability remotely, potentially leading to unauthorized access or code execution. This issue affects multiple models, including the RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000, and has been publicly disclosed. The vendor has been informed but has not provided a response.
Affected Version(s)
RE6250 20250801
RE6300 20250801
RE6350 20250801
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.