| tiêu đề | Linksys E5600 1.1.0.26 CWE-327 Use of a Broken or Risky Cryptographic Algorithm |
|---|
| Mô tả | During the firmware update process, improper integrity verification algorithm CRC(cyclic redundancy check) is used in function verify_gemtek_header() of file checkFw.sh to perform integrity verification on new firmware for update. This issue in the firmware update process of Linksys E5600(version V1.1.0.26) allows attackers to execute arbitrary code or cause denial of service via uploading a crafted firmware with the same CRC value as the new firmware for update. |
|---|
| Nguồn | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md |
|---|
| Người dùng | IOT_Res (UID 81722) |
|---|
| Đệ trình | 05/08/2025 04:47 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 19/08/2025 09:25 (14 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 320525 [Linksys E5600 1.1.0.26 Firmware checkFw.sh verify_gemtek_header mã hóa yếu] |
|---|
| điểm | 20 |
|---|