जमा करें #626693: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) OS Command Injectionजानकारी

शीर्षकLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) OS Command Injection
विवरणWe found an command Injection vulnerability in Linksys router with firmware which was released recently, allows remote attackers to execute arbitrary OS commands from a crafted request.In ipv6cmd , Ipv6PriDns、Ipv6SecDns、Ipv6StaticGateway、LanIpv6Addr、LanPrefixLen、pppoeUser、pppoePass、pppoeIdleTime、pppoeRedialPeriod、Ipv6in4_PrefixLen、LocalIpv6、RemoteIpv4、LanIPv6_Prefix、LanPrefixLen、ipv6to4Relay、ipv6rdRelay、tunrd_PrefixLen、wan_UseLinkLocal、Ipv6StaticIp、Ipv6PrefixLen is directly passed by the attacker, so we can control the Ipv6PriDns、Ipv6SecDns、Ipv6StaticGateway、LanIpv6Addr、LanPrefixLen、pppoeUser、pppoePass、pppoeIdleTime、pppoeRedialPeriod、Ipv6in4_PrefixLen、LocalIpv6、RemoteIpv4、LanIPv6_Prefix、LanPrefixLen、ipv6to4Relay、ipv6rdRelay、tunrd_PrefixLen、wan_UseLinkLocal、Ipv6StaticIp、Ipv6PrefixLen to attack the OS.
स्रोत⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_44/44.md
उपयोगकर्ता
 pjq123 (UID 86618)
सबमिशन01/08/2025 04:37 AM (9 महीनों पहले)
संयम10/08/2025 10:06 AM (9 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि319362 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 तक 20250801 /goform/setIpv6 ipv6cmd अधिकार वृद्धि]
अंक20

Want to know what is going to be exploited?

We predict KEV entries!