CVE-2025-25522

HIGH

Linksys WAP610N v1.0.05.002 - Buffer Overflow in Time Setting Operation

Title source: llm

Description

Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.

References (1)

Core 1

Core References

Broken Link

https://gist.github.com/XiaoCurry/f2365f4f6d18b2b4518ee20d5c091e1b

Scores

CVSS v3 7.3

EPSS 0.0016

EPSS Percentile 5.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-120

Status published

Products (1)

linksys/wap610n_firmware 1.0.05.002

Published Feb 11, 2025

Tracked Since Feb 18, 2026