Vulnerability

CERT-In Vulnerability Note CIVN-2025-0386
Authentication Bypass vulnerability in Linksys Router

Original Issue Date:December 26, 2025

Severity Rating: HIGH

Systems Affected

Linksys E9450-SG version 1.2.00.052

Overview

A vulnerability has been reported in Linksys Router, which could allow an attacker to access certain administration functions without login credentials.

Target Audience:
End-users/ Administrators of Linksys Router.

Risk Assessment:
Unrestricted access to sensitive system ﬁles and conﬁguration ﬁles on the targeted device.

Impact Assessment:
Impact on conﬁdentiality, integrity and availability of the vulnerable device.

Description

A Linksys router is a networking device from the Linksys brand that connects your home to the internet and creates a private Wi-Fi network, allowing multiple devices (phones, PCs, smart TVs) to share that connection wirelessly or via Ethernet.

This vulnerability exists in the Linksys Router due to Missing Authentication for Critical Function. A remote attacker could exploit this vulnerability by sending specially crafted URL to access certain administration functions without login credentials.

Solution

Apply appropriate updates as mentioned by vendor

Vendor Information

Linksys
https://www.linksys.com/

References

https://medium.com/csit-tech-blog/cve-2025-52692-discovery-and-exploitation-of-zero-day-vulnerability-in-linksys-e9450-sg-router-cda5c829bbf9

CVE Name
CVE-2025-52692

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India