CVE-2025-9146

Katalog CVE

CVSS 8.1 · High EPSS 0,53%

Kerentanan Cryptographic Issues pada linksys e5600 firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verify_gemtek_header of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

19 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-310: Cryptographic Issues
CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.320525 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.628642 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.320525 permissions required · vdb entry
• https://www.linksys.com/ product