CVE-2014-125122: Linksys WRT120N

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by sending a specially crafted HTTP POST request with an overly long TM_Block_URL parameter to the endpoint. By exploiting this flaw, an unauthenticated remote attacker can overwrite memory in a controlled manner, enabling them to temporarily reset the administrator password of the device to a blank value. This grants unauthorized access to the router’s web management interface without requiring valid credentials.

Affected products

• Linksys WRT120N: version 1.0.07 only

Published 2025-07-31. Last modified 2026-06-17.