Submit #631518: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflowinfo

TitleLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
DescriptionWe found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's WPSSTAPINEnr function, ssid is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ssid to execute arbitrary code.
Source⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_14/14.md
User
 pjqwudi (UID 85106)
Submission08/10/2025 13:42 (1 Year ago)
Moderation08/20/2025 13:17 (10 days later)
StatusAccepted
VulDB entry320776 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 up to 1.2.07.001 /goform/WPSSTAPINEnr ssid stack-based overflow]
Points18

Do you want to use VulDB in your project?

Use the official API to access entries easily!