Unrated severityNVD Advisory· Published Aug 11, 2025· Updated Aug 11, 2025

Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow

CVE-2025-8832

Description

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function setDMZ of the file /goform/setDMZ. The manipulation of the argument DMZIPAddress leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Linksys/RE7000llm-fuzzy
Range: <= 20250801
Linksys/RE6300llm-fuzzy
Range: <= 20250801
Linksys/RE6250llm-fuzzy
Range: <= 20250801
Linksys/RE6250v5
Range: 20250801
Linksys/RE6300v5
Range: 20250801
Linksys/RE6350v5
Range: 20250801
Linksys/RE6500v5
Range: 20250801
Linksys/RE7000v5
Range: 20250801
Linksys/RE9000v5
Range: 20250801

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.mdmitreexploit
vuldb.commitrethird-party-advisory
github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.linksys.commitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000