Vulnerability · Published Jun 27, 2025 · Assigned by VulDB

CVE-2025-6752Linksys WRT1900ACS/EA7200/EA7450/EA7500 IGD Layer3Forwarding SetDefaultConnectionService stack-based overflow

High 8.8

In plain English

A high-severity stack buffer overflow in EA7200 from Linksys. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 64% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)1.1%top 35.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Linksys WRT1900ACS, EA7200, EA7450 and EA7500 up to 20250619 and classified as critical. This vulnerability affects the function SetDefaultConnectionService of the file /upnp/control/Layer3Forwarding of the component IGD. The manipulation of the argument NewDefaultConnectionService leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Linksys	WRT1900ACS	20250619
Linksys	EA7200	20250619
Linksys	EA7450	20250619
Linksys	EA7500	20250619

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-314050 | Linksys WRT1900ACS/EA7200/EA7450/EA7500 IGD Layer3Forwarding SetDefaultConnectionService stack-based overflow vdb-entry, technical-description
VDB-314050 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #600638 | Linksys WRT1900ACS Ver. 2.0.3.201002 Stack-based Buffer Overflow third-party-advisory
https://github.com/feiwuxingxie/cve/blob/main/linksys/vul01/1.md related
https://github.com/feiwuxingxie/cve/blob/main/linksys/vul01/1.md#poc exploit
https://www.linksys.com/ product