CVE-2025-9527 HIGH

CVE-2025-9527: Linksys E1700 QoSSetup stack-based overflow

Vendor Linksys
Product E1700
Weakness CWE-121
Published August 27, 2025
Last update August 27, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function QoSSetup of the file /goform/QoSSetup. Performing manipulation of the argument ack_policy results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

August 27, 2025 CVE published
August 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2019-10954 Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow CVE-2025-34451 rofl0r/proxychains-ng <= 4.17 Stack-based Buffer Overflow CVE-2018-25360 AgataSoft Auto PingMaster 1.5 Buffer Overflow SEH CVE-2021-1181 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities CVE-2026-11504 Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow