إرسال #626689: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflowالمعلومات

عنوانLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
الوصفWe found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's setRIP function, RIPmode、RIPpasswd is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the RIPmode、RIPpasswd to execute arbitrary code.
المصدر⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_40/40.md
المستخدم
 pjq123 (UID 86618)
ارسال01/08/2025 04:34 AM (1 سنة منذ)
الاعتدال10/08/2025 10:06 AM (9 days later)
الحالةتمت الموافقة
إدخال VulDB319358 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 حتى 20250801 /goform/setRIP RIPmode/RIPpasswd تلف الذاكرة]
النقاط18

Do you want to use VulDB in your project?

Use the official API to access entries easily!