A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032). The function sub_4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary checks. Since a1 is often allocated with significantly smaller sizes (20-32 bytes), local attackers controlling the contents of /sys/class/net/%s/address can trigger buffer overflows, leading to memory corruption, denial of service, or potential arbitrary code execution.
References
| Link | Resource |
|---|---|
| http://linksys.com | Product |
| https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-E7350/CVE-2025-60695.md | Exploit Third Party Advisory |
| https://www.linksys.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
17 Nov 2025, 19:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linksys:e7350_firmware:1.1.00.032:*:*:*:*:*:*:* cpe:2.3:h:linksys:e7350:-:*:*:*:*:*:*:* |
|
| First Time |
Linksys e7350 Firmware
Linksys Linksys e7350 |
|
| References | () http://linksys.com - Product | |
| References | () https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-E7350/CVE-2025-60695.md - Exploit, Third Party Advisory | |
| References | () https://www.linksys.com/ - Product |
13 Nov 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
| CWE | CWE-121 |
13 Nov 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-13 17:15
Updated : 2025-11-17 19:55
NVD link : CVE-2025-60695
Mitre link : CVE-2025-60695
CVE.ORG link : CVE-2025-60695
JSON object : View
Products Affected
linksys
- e7350_firmware
- e7350
CWE
CWE-121
Stack-based Buffer Overflow