Skip to content
OpenAdvisories
High WID-SEC-2025-1223 10 CVEs

Linksys Router: Mehrere Schwachstellen ermöglichen Ausführen von Kommandos mit Administratorrechten

Published Jun 2, 2025 · Updated Jun 2, 2025 · de-DE

Vendor: Linksys Product: Router

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Linksys Router ausnutzen, um beliebige Kommandos mit Administratorrechten auszuführen.

Product

Router der Firma Linksys enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 10

  • Medium 6.3
    CVE-2025-5438 EPSS 26%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection

    A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The m…

    Linksys RE7000 RE6250 RE6300
  • Medium 6.3
    CVE-2025-5439

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injection

    A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been rated as critical. Affected by this issue is the function verifyFacebookLike of the file /goform/verify…

    Linksys RE6250 RE7000 RE6500
  • Medium 6.3
    CVE-2025-5440

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injection

    A vulnerability classified as critical has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function NTP of the file /goform/NTP. The manipulation of the argument…

    Linksys RE7000 RE6250 RE6300
  • Medium 6.3
    CVE-2025-5441 EPSS 14%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection

    A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setDeviceURL of the file /goform/setDeviceURL. The m…

    Linksys RE6250 RE7000 RE9000
  • Medium 6.3
    CVE-2025-5442 EPSS 14%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_pingGatewayByBBS os command injection

    A vulnerability, which was classified as critical, has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RP_pingGatewayByBBS of the file /goform/RP_…

    Linksys RE6250 RE7000 RE9000
  • Medium 6.3
    CVE-2025-5443 EPSS 14%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection

    A vulnerability, which was classified as critical, was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function wirelessAdvancedHidden of the file /goform/wirelessAdva…

    Linksys RE6250 RE7000 RE6300
  • Medium 6.3
    CVE-2025-5444 EPSS 14%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injection

    A vulnerability has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this vulnerability is the function RP_UpgradeFWByBBS of the file /gofor…

    Linksys RE6250 RE7000 RE6300
  • Medium 6.3
    CVE-2025-5445 EPSS 14%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkFWByBBS os command injection

    A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this issue is the function RP_checkFWByBBS of the file /goform/RP_checkFWByB…

    Linksys RE7000 RE6250 RE6300
  • Medium 6.3
    CVE-2025-5446 EPSS 14%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injection

    A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been classified as critical. This affects the function RP_checkCredentialsByBBS of the file /goform/RP_check…

    Linksys RE7000 RE6250 RE6300
  • Medium 6.3
    CVE-2025-5447 EPSS 33%

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection

    A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1M…

    Linksys RE7000 RE6250 RE6300

Revision history

  1. #1

    Initiale Fassung

References