CVE-2025-9146

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md", "name": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md", "tags": [], "refsource": ""}, {"url": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md", "name": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md", "tags": [], "refsource": ""}, {"url": "https://vuldb.com/?ctiid.320525", "name": "VDB-320525 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [], "refsource": ""}, {"url": "https://vuldb.com/?id.320525", "name": "VDB-320525 | Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption", "tags": [], "refsource": ""}, {"url": "https://vuldb.com/?submit.628642", "name": "Submit #628642 | Linksys E5600 1.1.0.26 CWE-327 Use of a Broken or Risky Cryptographic Algorithm", "tags": [], "refsource": ""}, {"url": "https://www.linksys.com/", "name": "https://www.linksys.com/", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verify_gemtek_header of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way."}]}, "problemtype": {"problemtype_data": [{"description": []}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2025-9146", "ASSIGNER": "cna@vuldb.com"}}, "impact": {}, "publishedDate": "2025-08-19T16:15Z", "configurations": {"nodes": [], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-08-19T20:15Z"}