Record status Published
Identifier year (not publication year) 2025
Source publication Jun 2, 2025
Source updated Jun 2, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injection
A vulnerability has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this vulnerability is the function RP_UpgradeFWByBBS of the file /goform/RP_UpgradeFWByBBS. The manipulation of the argument type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RE6500
Vendor Linksys
Product RE6500
Platforms Unknown
Default status Unknown
RE6500 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE6250
Vendor Linksys
Product RE6250
Platforms Unknown
Default status Unknown
RE6250 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE6300
Vendor Linksys
Product RE6300
Platforms Unknown
Default status Unknown
RE6300 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE6350
Vendor Linksys
Product RE6350
Platforms Unknown
Default status Unknown
RE6350 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE7000
Vendor Linksys
Product RE7000
Platforms Unknown
Default status Unknown
RE7000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE9000
Vendor Linksys
Product RE9000
Platforms Unknown
Default status Unknown
RE9000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed