{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-14133","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","state":"PUBLISHED","assignerShortName":"VulDB","dateReserved":"2025-12-05T17:07:06.757Z","datePublished":"2025-12-06T10:32:05.450Z","dateUpdated":"2025-12-08T17:14:16.137Z"},"containers":{"cna":{"providerMetadata":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2025-12-06T10:32:05.450Z"},"title":"Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflow","problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-121","lang":"en","description":"Stack-based Buffer Overflow"}]},{"descriptions":[{"type":"CWE","cweId":"CWE-119","lang":"en","description":"Memory Corruption"}]}],"affected":[{"vendor":"Linksys","product":"RE6500","versions":[{"version":"1.0.013.001","status":"affected"},{"version":"1.0.04.001","status":"affected"},{"version":"1.0.04.002","status":"affected"},{"version":"1.1.05.003","status":"affected"},{"version":"1.2.07.001","status":"affected"}]},{"vendor":"Linksys","product":"RE6250","versions":[{"version":"1.0.013.001","status":"affected"},{"version":"1.0.04.001","status":"affected"},{"version":"1.0.04.002","status":"affected"},{"version":"1.1.05.003","status":"affected"},{"version":"1.2.07.001","status":"affected"}]},{"vendor":"Linksys","product":"RE6300","versions":[{"version":"1.0.013.001","status":"affected"},{"version":"1.0.04.001","status":"affected"},{"version":"1.0.04.002","status":"affected"},{"version":"1.1.05.003","status":"affected"},{"version":"1.2.07.001","status":"affected"}]},{"vendor":"Linksys","product":"RE6350","versions":[{"version":"1.0.013.001","status":"affected"},{"version":"1.0.04.001","status":"affected"},{"version":"1.0.04.002","status":"affected"},{"version":"1.1.05.003","status":"affected"},{"version":"1.2.07.001","status":"affected"}]},{"vendor":"Linksys","product":"RE7000","versions":[{"version":"1.0.013.001","status":"affected"},{"version":"1.0.04.001","status":"affected"},{"version":"1.0.04.002","status":"affected"},{"version":"1.1.05.003","status":"affected"},{"version":"1.2.07.001","status":"affected"}]},{"vendor":"Linksys","product":"RE9000","versions":[{"version":"1.0.013.001","status":"affected"},{"version":"1.0.04.001","status":"affected"},{"version":"1.0.04.002","status":"affected"},{"version":"1.1.05.003","status":"affected"},{"version":"1.2.07.001","status":"affected"}]}],"descriptions":[{"lang":"en","value":"A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function AP_get_wireless_clientlist_setClientsName of the file mod_form.so. Performing manipulation of the argument clientsname_0 results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.7,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"timeline":[{"time":"2025-12-05T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-12-05T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-12-05T18:12:26.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"pjqwudi (VulDB User)","type":"reporter"}],"references":[{"url":"https://vuldb.com/?id.334522","name":"VDB-334522 | Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.334522","name":"VDB-334522 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.697980","name":"Submit #697980 | Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001)  RE6250(1.0.04.001)  RE6300(1.2.07.001)  RE6350(1.0.04.001)  RE7000(1.1.05.003)  RE9000(1.0.04.002) Stack-based Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_62/62.md","tags":["related"]},{"url":"https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_62/62.md#poc","tags":["exploit"]},{"url":"https://www.linksys.com/","tags":["product"]}]},"adp":[{"references":[{"url":"https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_62/62.md","tags":["exploit"]},{"url":"https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_62/62.md#poc","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-08T17:07:23.376156Z","id":"CVE-2025-14133","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-08T17:14:16.137Z"}}]}}