إرسال #634823: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflowالمعلومات

عنوانLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
الوصفWe found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's singlePortForwardAdd function, ruleName、schedule、inboundFilter is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ruleName、schedule、inboundFilter to execute arbitrary code.
المصدر⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_37/37.md
المستخدم
 Bond_yes (UID 89043)
ارسال14/08/2025 06:25 PM (10 أشهر منذ)
الاعتدال26/08/2025 09:35 AM (12 days later)
الحالةتمت الموافقة
إدخال VulDB321398 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 حتى 1.2.07.001 singlePortForwardAdd ruleName/schedule/inboundFilter تلف الذاكرة]
النقاط19

Do you know our Splunk app?

Download it now for free!