Submit #634823: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflowinfo

TitleLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
DescriptionWe found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's singlePortForwardAdd function, ruleName、schedule、inboundFilter is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the ruleName、schedule、inboundFilter to execute arbitrary code.
Source⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_37/37.md
User
 Bond_yes (UID 89043)
Submission08/14/2025 18:25 (1 Year ago)
Moderation08/26/2025 09:35 (12 days later)
StatusAccepted
VulDB entry321398 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 up to 1.2.07.001 singlePortForwardAdd ruleName/schedule/inboundFilter stack-based overflow]
Points19

Do you need the next level of professionalism?

Upgrade your account now!