Linksys E1200 2.0.11.001 libshared.so get_mac_from_ip/get_ip_from_mac stack-based overflow

Summaryinfo

A vulnerability described as critical has been identified in Linksys E1200 2.0.11.001. Affected is the function get_mac_from_ip/get_ip_from_mac of the file libshared.so. Executing a manipulation can lead to stack-based overflow. This vulnerability is handled as CVE-2025-60692. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in Linksys E1200 2.0.11.001. It has been declared as critical. This vulnerability affects the function get_mac_from_ip/get_ip_from_mac of the file libshared.so. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The functions get_mac_from_ip and get_ip_from_mac use sscanf with overly permissive "%100s" format specifiers to parse entries from /proc/net/arp into fixed-size buffers (v6: 50 bytes, v7 sub-arrays: 50 bytes). This allows local attackers controlling the contents of /proc/net/arp to overflow stack buffers, leading to memory corruption, denial of service, or potential arbitrary code execution.

This vulnerability was named CVE-2025-60692 since 09/26/2025. The exploitation appears to be easy. The attack can be initiated remotely. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 11/14/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at CERT Bund (WID-SEC-2025-2604). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Linksys Router

Productinfo

Type

• Router Operating System

Vendor

• Linksys

Name

• E1200

Version

• 2.0.11.001

License

• commercial

Website

• Vendor: https://www.linksys.com/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion