High severity8.8NVD Advisory· Published Dec 6, 2025· Updated Jun 17, 2026
CVE-2025-14135
CVE-2025-14135
Description
A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function AP_get_wired_clientlist_setClientsName of the file mod_form.so. The manipulation of the argument clientsname_0 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re6300_firmware:1.2.07.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re6250_firmware:1.0.04.001:*:*:*:*:*:*:*
cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re7000_firmware:1.1.05.003:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re9000_firmware:1.0.04.002:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_64/64.mdnvdExploitThird Party Advisory
- github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_64/64.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.linksys.comnvdProduct
News mentions
0No linked articles in our index yet.