Description (CNA)
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RP_pingGatewayByBBS of the file /goform/RP_pingGatewayByBBS. The manipulation of the argument ssidhex results in stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linksys / RE6250 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE6300 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE6350 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE6500 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE7000 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE9000 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
CWE
CWE-121, CWE-119
References
- https://vuldb.com/?id.320779
- https://vuldb.com/?ctiid.320779
- https://vuldb.com/?submit.631521
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_17/17.md
- https://www.linksys.com/
ADP enrichment
No English description supplied.