{"id":69788,"date":"2025-09-01T09:18:00","date_gmt":"2025-09-01T09:18:00","guid":{"rendered":""},"modified":"2025-09-10T17:20:05","modified_gmt":"2025-09-10T23:20:05","slug":"cve-2025-9355-stack-based-buffer-overflow-in-linksys-devices","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-9355-stack-based-buffer-overflow-in-linksys-devices\/","title":{"rendered":"<strong>CVE-2025-9355: Stack-Based Buffer Overflow in Linksys Devices<\/strong>"},"content":{"rendered":"<p><strong>Overview<\/strong><\/p>\n<p>The cybersecurity world has recently been alerted to a significant vulnerability concerning various models of Linksys devices. This vulnerability, known as CVE-2025-9355, was identified within the scheduleAdd function of the \/goform\/scheduleAdd file. These particular models are widely used, and the security flaw could <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-42950-sap-landscape-transformation-vulnerability-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"77583\">potentially lead to a devastating system<\/a> compromise or data leakage. The gravity of the situation is further accentuated by the fact that the exploit has been made public, and the vendor, after being informed, has not yet responded with a solution.<\/p>\n<p><strong>Vulnerability Summary<\/strong><\/p>\n<p>CVE ID: CVE-2025-9355<br \/>\nSeverity: High (CVSS: 8.8)<br \/>\nAttack Vector: Network<br \/>\nPrivileges Required: None<br \/>\nUser Interaction: None<br \/>\nImpact: <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-8939-buffer-overflow-vulnerability-in-tenda-ac20-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"78267\">Potential system<\/a> compromise or data leakage<\/p>\n<p><strong>Affected Products<\/strong><\/p><div id=\"ameeb-1390668521\" class=\"ameeb-content-2 ameeb-entity-placement\"><div style=\"border-left: 4px solid #555; padding-left: 20px; margin: 48px 0; font-family: Roboto, sans-serif; color: #ffffff; line-height: 1.6; max-width: 700px;\">\r\n  <h2 style=\"margin-top: 0; font-size: 20px; font-weight: 600; display: flex; align-items: center;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"display: inline-flex; align-items: center; margin-right: 8px;\">\r\n      <img decoding=\"async\" src=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/10\/Best-App-icon-Ameeba.png\" alt=\"Ameeba Chat Icon\" style=\"width: 40px; height: 40px;\" \/>\r\n    <\/a>\r\n    A new way to communicate\r\n  <\/h2>\r\n\r\n  <p style=\"margin-bottom: 12px;\">\r\n    Ameeba Chat is built on encrypted identity, not personal profiles.\r\n  <\/p>\r\n\r\n  <p style=\"margin-bottom: 16px;\">\r\n    Message, call, share files, and coordinate with identities kept separate.\r\n  <\/p>\r\n\r\n  <ul style=\"list-style: none; padding-left: 0; margin-bottom: 20px;\">\r\n    <li>\u2022 Encrypted identity<\/li>\r\n    <li>\u2022 Ameeba Chat authenticates access<\/li>\r\n    <li>\u2022 Aliases and categories<\/li>\r\n    <li>\u2022 End-to-end encrypted chat, calls, and files<\/li>\r\n    <li>\u2022 Secure notes for sensitive information<\/li>\r\n  <\/ul>\r\n\r\n  <p style=\"font-style: italic; font-weight: 600; margin-bottom: 24px;\">\r\n    Private communication, rethought.\r\n  <\/p>\r\n\r\n  <div style=\"display: flex; flex-wrap: wrap; gap: 12px;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\/download\" style=\"background-color: #ffffff; color: #000000; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Download Ameeba Chat<\/a>\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"border: 1px solid #ffffff; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Learn More<\/a>\r\n  <\/div>\r\n<\/div>\r\n<\/div>\n<p>Product | Affected Versions<\/p>\n<p>Linksys RE6250 | 1.0.013.001<br \/>\nLinksys RE6300 | 1.0.04.001<br \/>\nLinksys RE6350 | 1.0.04.002<br \/>\nLinksys RE6500 | 1.1.05.003<br \/>\nLinksys RE7000 | 1.2.07.001<br \/>\nLinksys RE9000 | 1.0.013.001<\/p>\n<p><strong>How the Exploit Works<\/strong><\/p>\n<p>The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-8817-critical-stack-based-buffer-overflow-vulnerability-in-linksys-devices\/\"  data-wpil-monitor-id=\"77783\">vulnerability resides in the scheduleAdd function of Linksys<\/a> devices. More specifically, it is a stack-based <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-54878-heap-buffer-overflow-vulnerability-in-nasa-cryptolib\/\"  data-wpil-monitor-id=\"77488\">buffer overflow vulnerability<\/a> which occurs when the ruleName argument is manipulated. The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-48860-exploiting-backup-archives-to-gain-remote-access-in-ctrlx-os\/\"  data-wpil-monitor-id=\"81434\">exploit can be carried out remotely<\/a> and does not require any user interaction or privileges, which significantly increases its potential impact. Once exploited, the attacker could <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-47107-heap-based-buffer-overflow-vulnerability-in-incopy-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"78335\">potentially gain full control of the system<\/a>, leading to the compromise of sensitive data or even the entire network.<\/p>\n<p><strong>Conceptual Example Code<\/strong><\/p><div id=\"ameeb-739653406\" class=\"ameeb-content ameeb-entity-placement\"><div class=\"poptin-embedded\" data-id=\"f6b387694f681\"><\/div>\r\n\r\n\r\n\r\n\r\n\r\n<\/div>\n<p>Here is a conceptual example of how the vulnerability might be exploited. The malicious payload in this case would be designed to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-53131-heap-based-buffer-overflow-vulnerability-in-windows-media\/\"  data-wpil-monitor-id=\"77616\">overflow the buffer<\/a> and execute shellcode:<\/p>\n<pre><code class=\"\" data-line=\"\">POST \/goform\/scheduleAdd HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/json\n{ &quot;ruleName&quot;: &quot;A&quot;*5000 } \/* Overly long ruleName to trigger buffer overflow *\/<\/code><\/pre>\n<p><strong>Mitigation Guidance<\/strong><\/p>\n<p>As of now, the vendor has not provided a patch to fix this vulnerability. Therefore, users are advised to protect their devices using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) as a temporary mitigation. Regularly monitor the vendor&#8217;s website for any updates regarding a patch. Additionally, users can also consider disabling the <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-49661-untrusted-pointer-dereference-vulnerability-in-windows-ancillary-function-driver-for-winsock\/\"  data-wpil-monitor-id=\"80427\">vulnerable function<\/a> if it is not essential to their operations.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview The cybersecurity world has recently been alerted to a significant vulnerability concerning various models of Linksys devices. This vulnerability, known as CVE-2025-9355, was identified within the scheduleAdd function of the \/goform\/scheduleAdd file. These particular models are widely used, and the security flaw could potentially lead to a devastating system compromise or data leakage. The [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[86],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-69788","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-buffer-overflow"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/69788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=69788"}],"version-history":[{"count":8,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/69788\/revisions"}],"predecessor-version":[{"id":73887,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/69788\/revisions\/73887"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=69788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=69788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=69788"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=69788"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=69788"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=69788"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=69788"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=69788"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=69788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}