Invia #631531: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflowinformazioni

TitoloLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
DescrizioneWe found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's RP_checkCredentialsByBBS function, ssidhex、pwd is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ssidhex、pwd to execute arbitrary code.
Fonte⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_27/27.md
Utente
 pjq123 (UID 86618)
Sottomissione10/08/2025 13:52 (1 Anno fa)
Moderazione22/08/2025 17:40 (12 days later)
StatoAccettato
Voce VulDB321062 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 fino a 1.2.07.001 RP_checkCredentialsByBBS ssidhex/pwd buffer overflow]
Punti20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!