CVE-2025-14134
A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function RE2000v2Repeater_get_wireless_clientlist_setClientsName of the file mod_form.so. Executing manipulation of the argument clientsname_0 can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published:Dec 6, 2025
Last Modified:Dec 10, 2025
EPS:Dec 6, 2025
EPSS Score:0.00082
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Linksys
Product
Re6250
Linksys
Re6250
Vendor
Linksys
Product
Re6250 Firmware
Linksys
Re6250 Firmware
Vendor
Linksys
Product
Re6300
Linksys
Re6300
Vendor
Linksys
Product
Re6300 Firmware
Linksys
Re6300 Firmware
Vendor
Linksys
Product
Re6350
Linksys
Re6350
Vendor
Linksys
Product
Re6350 Firmware
Linksys
Re6350 Firmware
Vendor
Linksys
Product
Re6500
Linksys
Re6500
Vendor
Linksys
Product
Re6500 Firmware
Linksys
Re6500 Firmware
Vendor
Linksys
Product
Re7000
Linksys
Re7000
Vendor
Linksys
Product
Re7000 Firmware
Linksys
Re7000 Firmware
Vendor
Linksys
Product
Re9000
Linksys
Re9000
Vendor
Linksys
Product
Re9000 Firmware
Linksys
Re9000 Firmware
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
