Gửi #634819: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflowthông tin

tiêu đềLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
Mô tảWe found an heap overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's setIpv6 function, tunrd_Prefix is directly passed by the attacker, If this part of the data is too long, it will cause the heap overflow, so we can control the tunrd_Prefix to execute arbitrary code.
Nguồn⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_35/35.md
Người dùng
 Bond_yes (UID 89043)
Đệ trình14/08/2025 18:23 (cách đây 10 các tháng)
Kiểm duyệt26/08/2025 09:35 (12 days later)
Trạng tháiđược chấp nhận
Mục VulDB321396 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 đến 1.2.07.001 /goform/setIpv6 tunrd_Prefix tràn bộ đệm]
điểm19

Do you know our Splunk app?

Download it now for free!