CVE-2025-60695: n/a
A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032). The function sub_4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary checks. Since a1 is often allocated with significantly smaller sizes (20-32 bytes), local attackers controlling the contents of /sys/class/net/%s/address can trigger buffer overflows, leading to memory corruption, denial of service, or potential arbitrary code execution.
AI Analysis
Technical Summary
CVE-2025-60695 describes a stack-based buffer overflow in the mtk_dut binary of Linksys E7350 routers running firmware 1.1.00.032. The function sub_4045A8 reads up to 256 bytes from the network interface address file (/sys/class/net/%s/address) into a local buffer, then copies this data using strcpy into a caller-provided buffer (a1) that is often only 20-32 bytes in size. Because strcpy does not perform boundary checks, if the attacker controls the contents of the address file, they can overflow the smaller buffer, causing memory corruption. This vulnerability can be exploited by local attackers to cause denial of service or potentially execute arbitrary code.
Potential Impact
The vulnerability allows local attackers with control over the contents of /sys/class/net/%s/address to trigger a stack-based buffer overflow in the mtk_dut binary. This can result in memory corruption, leading to denial of service or potentially arbitrary code execution on the affected device. The CVSS score of 5.9 (medium severity) reflects the local attack vector and the requirement for attacker control over specific system files.
Mitigation Recommendations
No patch or official fix is currently available for this vulnerability. Since the affected product is not a cloud service, remediation depends on vendor advisories or firmware updates. Users of Linksys E7350 routers with firmware 1.1.00.032 should monitor vendor communications for patches. Until a fix is available, restricting local access to the device and preventing unauthorized modification of /sys/class/net/%s/address may reduce risk.
CVE-2025-60695: n/a
Description
A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032). The function sub_4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary checks. Since a1 is often allocated with significantly smaller sizes (20-32 bytes), local attackers controlling the contents of /sys/class/net/%s/address can trigger buffer overflows, leading to memory corruption, denial of service, or potential arbitrary code execution.
CVSS v3.1
Score 5.9medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-60695 describes a stack-based buffer overflow in the mtk_dut binary of Linksys E7350 routers running firmware 1.1.00.032. The function sub_4045A8 reads up to 256 bytes from the network interface address file (/sys/class/net/%s/address) into a local buffer, then copies this data using strcpy into a caller-provided buffer (a1) that is often only 20-32 bytes in size. Because strcpy does not perform boundary checks, if the attacker controls the contents of the address file, they can overflow the smaller buffer, causing memory corruption. This vulnerability can be exploited by local attackers to cause denial of service or potentially execute arbitrary code.
Potential Impact
The vulnerability allows local attackers with control over the contents of /sys/class/net/%s/address to trigger a stack-based buffer overflow in the mtk_dut binary. This can result in memory corruption, leading to denial of service or potentially arbitrary code execution on the affected device. The CVSS score of 5.9 (medium severity) reflects the local attack vector and the requirement for attacker control over specific system files.
Mitigation Recommendations
No patch or official fix is currently available for this vulnerability. Since the affected product is not a cloud service, remediation depends on vendor advisories or firmware updates. Users of Linksys E7350 routers with firmware 1.1.00.032 should monitor vendor communications for patches. Until a fix is available, restricting local access to the device and preventing unauthorized modification of /sys/class/net/%s/address may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2025-09-26T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6916102073934fe85f046f62
Added to database: 11/13/2025, 17:06:40 UTC
Last enriched: 07/05/2026, 21:34:27 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 202
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.