Threats Tagged 'cve-2025-29231'

CVE-2025-29231 is a stored cross-site scripting (XSS) vulnerability found in the page_save component of Linksys E5600 routers, allowing attackers to inject malicious scripts via the hostname and domainName parameters. Exploitation requires no privileges but does need user interaction, such as an administrator visiting a crafted page. The vulnerability can lead to partial compromise of confidentiality and integrity by executing arbitrary web scripts in the context of the router's management interface. Although no known exploits are currently in the wild, the medium severity CVSS score of 6.1 reflects the potential risk. European organizations using Linksys E5600 routers should be aware of this risk, especially in environments where router management interfaces are accessible. Mitigation involves restricting access to router management interfaces, validating and sanitizing input parameters, and monitoring for suspicious activity. Countries with higher Linksys market penetration and critical infrastructure relying on these devices, such as Germany, France, and the UK, are more likely to be affected. This vulnerability does not impact availability but can facilitate further attacks if exploited.

MediumVulnerabilityGermanyFranceItaly+3#cve#cve-2025-29231