Medium severity6.3NVD Advisory· Published Aug 28, 2025· Updated Apr 29, 2026
CVE-2025-9575
CVE-2025-9575
Description
A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function cgiMain of the file /cgi-bin/upload.cgi. Executing manipulation of the argument filename can lead to os command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
6- cpe:2.3:o:linksys:re6250_firmware:1.0.04.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re6300_firmware:1.2.07.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re6350_firmware:1.0.04.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re6500_firmware:1.0.013.001:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re7000_firmware:1.1.05.003:*:*:*:*:*:*:*
- cpe:2.3:o:linksys:re9000_firmware:1.0.04.002:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.mdnvdExploitThird Party Advisory
- github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.linksys.comnvdProduct
News mentions
0No linked articles in our index yet.