Record status Published
Identifier year (not publication year) 2025
Source publication Jun 2, 2025
Source updated Jun 2, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injection
A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been classified as critical. This affects the function RP_checkCredentialsByBBS of the file /goform/RP_checkCredentialsByBBS. The manipulation of the argument pwd leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RE6500
Vendor Linksys
Product RE6500
Platforms Unknown
Default status Unknown
RE6500 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE6250
Vendor Linksys
Product RE6250
Platforms Unknown
Default status Unknown
RE6250 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE6300
Vendor Linksys
Product RE6300
Platforms Unknown
Default status Unknown
RE6300 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE6350
Vendor Linksys
Product RE6350
Platforms Unknown
Default status Unknown
RE6350 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE7000
Vendor Linksys
Product RE7000
Platforms Unknown
Default status Unknown
RE7000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed
RE9000
Vendor Linksys
Product RE9000
Platforms Unknown
Default status Unknown
RE9000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.013.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.001 affectedUnavailable Unavailable Unavailable None listed 1.0.04.002 affectedUnavailable Unavailable Unavailable None listed 1.1.05.003 affectedUnavailable Unavailable Unavailable None listed 1.2.07.001 affectedUnavailable Unavailable Unavailable None listed