Listen to this Post
How the CVE Works
The vulnerability exists in the `RP_pingGatewayByBBS` function within `/goform/RP_pingGatewayByBBS` in Linksys RE6500, RE6250, RE6300, RE6350, RE7000, and RE9000 firmware versions 1.0.013.001 to 1.2.07.001. Attackers can exploit this flaw by manipulating the `ip/nm/gw` parameters to inject arbitrary OS commands due to insufficient input sanitization. The attack is remotely executable, allowing unauthenticated threat actors to execute malicious commands on the device with root privileges. The publicly disclosed exploit leverages crafted HTTP requests to trigger command injection, potentially leading to full device compromise.
DailyCVE Form
Platform: Linksys RE Series
Version: 1.0.013.001-1.2.07.001
Vulnerability: OS Command Injection
Severity: Critical
Date: 06/25/2025
Prediction: Patch expected by 08/2025
What Undercode Say
Analytics:
curl -X POST -d "ip=127.0.0.1;id" http://target/goform/RP_pingGatewayByBBS
requests.post("http://target/goform/RP_pingGatewayByBBS", data={"ip": "127.0.0.1;malicious_cmd"})
How Exploit
Crafted HTTP POST requests with malicious OS commands in the `ip/nm/gw` parameters.
Protection from this CVE
- Apply vendor patches.
- Disable WAN management.
- Use network segmentation.
Impact
Remote code execution.
Device takeover.
Network compromise.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
