提交 #626697: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow信息

标题Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) Stack-based Buffer Overflow
描述We found an stack overflow vulnerability in Linksys router with firmware which was released recently, allows remote attackers to crash the server.In the router's setDMZ function, DMZIPAddress is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the DMZIPAddress to execute arbitrary code.
来源⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.md
用户
 pjq123 (UID 86618)
提交2025-08-01 04時40分 (9 月前)
管理2025-08-10 10時06分 (9 days later)
状态已接受
VulDB条目319366 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 直到 20250801 /goform/setDMZ DMZIPAddress 内存损坏]
积分18

Want to know what is going to be exploited?

We predict KEV entries!