提出 #634823: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow情報

タイトルLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
説明We found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's singlePortForwardAdd function, ruleName、schedule、inboundFilter is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ruleName、schedule、inboundFilter to execute arbitrary code.
ソース⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_37/37.md
ユーザー
 Bond_yes (UID 89043)
送信2025年08月14日 18:25 (10 月 ago)
モデレーション2025年08月26日 09:35 (12 days later)
ステータス承諾済み
VulDBエントリ321398 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 迄 1.2.07.001 singlePortForwardAdd ruleName/schedule/inboundFilter メモリ破損]
ポイント19

Do you need the next level of professionalism?

Upgrade your account now!