{"id":69788,"date":"2025-09-01T09:18:00","date_gmt":"2025-09-01T09:18:00","guid":{"rendered":""},"modified":"2025-09-10T17:20:05","modified_gmt":"2025-09-10T23:20:05","slug":"cve-2025-9355-stack-based-buffer-overflow-in-linksys-devices","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-9355-stack-based-buffer-overflow-in-linksys-devices\/","title":{"rendered":"<strong>CVE-2025-9355: Stack-Based Buffer Overflow in Linksys Devices<\/strong>"},"content":{"rendered":"<p><strong>Overview<\/strong><\/p>\n<p>The cybersecurity world has recently been alerted to a significant vulnerability concerning various models of Linksys devices. This vulnerability, known as CVE-2025-9355, was identified within the scheduleAdd function of the \/goform\/scheduleAdd file. These particular models are widely used, and the security flaw could <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-42950-sap-landscape-transformation-vulnerability-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"77583\">potentially lead to a devastating system<\/a> compromise or data leakage. The gravity of the situation is further accentuated by the fact that the exploit has been made public, and the vendor, after being informed, has not yet responded with a solution.<\/p>\n<p><strong>Vulnerability Summary<\/strong><\/p>\n<p>CVE ID: CVE-2025-9355<br \/>\nSeverity: High (CVSS: 8.8)<br \/>\nAttack Vector: Network<br \/>\nPrivileges Required: None<br \/>\nUser Interaction: None<br \/>\nImpact: <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-8939-buffer-overflow-vulnerability-in-tenda-ac20-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"78267\">Potential system<\/a> compromise or data leakage<\/p>\n<p><strong>Affected Products<\/strong><\/p><div id=\"ameeb-363443072\" class=\"ameeb-content-2 ameeb-entity-placement\"><div style=\"border-left: 4px solid #555; padding-left: 20px; margin: 48px 0; font-family: Roboto, sans-serif; color: #ffffff; line-height: 1.6; max-width: 720px;\">\r\n  <h2 style=\"margin-top: 0; font-size: 22px; font-weight: 600; display: flex; align-items: center; letter-spacing: -0.02em;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"display: inline-flex; align-items: center; margin-right: 10px;\">\r\n      <img decoding=\"async\" src=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/10\/Best-App-icon-Ameeba.png\" alt=\"Ameeba Chat Icon\" style=\"width: 42px; height: 42px;\" \/>\r\n    <\/a>\r\n    Share secrets securely\r\n  <\/h2>\r\n\r\n  <p style=\"margin-bottom: 14px; color: #d1d5db;\">\r\n    Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n  <\/p>\r\n\r\n  <p style=\"margin-bottom: 18px; color: #a1a1aa;\">\r\n    Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n  <\/p>\r\n\r\n  <ul style=\"list-style: none; padding-left: 0; margin-bottom: 24px; color: #e4e4e7;\">\r\n    <li style=\"margin-bottom: 8px;\">\u2022 Encrypted identity<\/li>\r\n    <li style=\"margin-bottom: 8px;\">\u2022 Private Spaces for organizations and teams<\/li>\r\n    <li style=\"margin-bottom: 8px;\">\u2022 End-to-end encrypted chat, calls, files, and notes<\/li>\r\n    <li style=\"margin-bottom: 8px;\">\u2022 Sensitive AI work and protected collaboration<\/li>\r\n    <li>\u2022 Built for information that cannot leak<\/li>\r\n  <\/ul>\r\n\r\n  <p style=\"font-style: italic; font-weight: 600; margin-bottom: 24px; color: #ffffff;\">\r\n    Our mission is to secure human work alongside AI.\r\n  <\/p>\r\n\r\n  <div style=\"display: flex; flex-wrap: wrap; gap: 12px;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\/download\" style=\"background-color: #ffffff; color: #000000; padding: 10px 20px; text-decoration: none; border-radius: 8px; font-weight: 500;\">\r\n      Download Ameeba\r\n    <\/a>\r\n\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"border: 1px solid #ffffff; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 8px; font-weight: 500;\">\r\n      Learn More\r\n    <\/a>\r\n  <\/div>\r\n<\/div><\/div>\n<p>Product | Affected Versions<\/p>\n<p>Linksys RE6250 | 1.0.013.001<br \/>\nLinksys RE6300 | 1.0.04.001<br \/>\nLinksys RE6350 | 1.0.04.002<br \/>\nLinksys RE6500 | 1.1.05.003<br \/>\nLinksys RE7000 | 1.2.07.001<br \/>\nLinksys RE9000 | 1.0.013.001<\/p>\n<p><strong>How the Exploit Works<\/strong><\/p>\n<p>The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-8817-critical-stack-based-buffer-overflow-vulnerability-in-linksys-devices\/\"  data-wpil-monitor-id=\"77783\">vulnerability resides in the scheduleAdd function of Linksys<\/a> devices. More specifically, it is a stack-based <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-54878-heap-buffer-overflow-vulnerability-in-nasa-cryptolib\/\"  data-wpil-monitor-id=\"77488\">buffer overflow vulnerability<\/a> which occurs when the ruleName argument is manipulated. The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-48860-exploiting-backup-archives-to-gain-remote-access-in-ctrlx-os\/\"  data-wpil-monitor-id=\"81434\">exploit can be carried out remotely<\/a> and does not require any user interaction or privileges, which significantly increases its potential impact. Once exploited, the attacker could <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-47107-heap-based-buffer-overflow-vulnerability-in-incopy-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"78335\">potentially gain full control of the system<\/a>, leading to the compromise of sensitive data or even the entire network.<\/p>\n<p><strong>Conceptual Example Code<\/strong><\/p><div id=\"ameeb-3676785976\" class=\"ameeb-content ameeb-entity-placement\"><div class=\"poptin-embedded\" data-id=\"f6b387694f681\"><\/div>\r\n\r\n\r\n\r\n\r\n\r\n<\/div>\n<p>Here is a conceptual example of how the vulnerability might be exploited. The malicious payload in this case would be designed to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-53131-heap-based-buffer-overflow-vulnerability-in-windows-media\/\"  data-wpil-monitor-id=\"77616\">overflow the buffer<\/a> and execute shellcode:<\/p>\n<pre><code class=\"\" data-line=\"\">POST \/goform\/scheduleAdd HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/json\n{ &quot;ruleName&quot;: &quot;A&quot;*5000 } \/* Overly long ruleName to trigger buffer overflow *\/<\/code><\/pre>\n<p><strong>Mitigation Guidance<\/strong><\/p>\n<p>As of now, the vendor has not provided a patch to fix this vulnerability. Therefore, users are advised to protect their devices using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) as a temporary mitigation. Regularly monitor the vendor&#8217;s website for any updates regarding a patch. Additionally, users can also consider disabling the <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-49661-untrusted-pointer-dereference-vulnerability-in-windows-ancillary-function-driver-for-winsock\/\"  data-wpil-monitor-id=\"80427\">vulnerable function<\/a> if it is not essential to their operations.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview The cybersecurity world has recently been alerted to a significant vulnerability concerning various models of Linksys devices. This vulnerability, known as CVE-2025-9355, was identified within the scheduleAdd function of the \/goform\/scheduleAdd file. These particular models are widely used, and the security flaw could potentially lead to a devastating system compromise or data leakage. The [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[86],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-69788","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-buffer-overflow"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/69788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=69788"}],"version-history":[{"count":8,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/69788\/revisions"}],"predecessor-version":[{"id":73887,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/69788\/revisions\/73887"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=69788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=69788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=69788"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=69788"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=69788"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=69788"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=69788"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=69788"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=69788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}