Description
A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The apply_cgi and block_cgi functions copy user-supplied input from the "url" CGI parameter into stack buffers (v36, v29) using sprintf without bounds checking. Because these buffers are allocated as single-byte variables, any non-empty input will trigger a buffer overflow. Remote attackers can exploit this vulnerability via crafted HTTP requests to execute arbitrary code or cause denial of service without authentication.
INFO
Published Date :
2025-11-13T00:00:00.000Z
Last Modified :
2025-11-13T17:54:58.472Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-60691 vulnerability.
| Vendors | Products |
|---|---|
| Linksys |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-60691.
