Description (CNA)
A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function urlFilterManageRule of the file /goform/urlFilterManageRule. Executing manipulation of the argument urlFilterRuleName/scheduleUrl/addURLFilter can lead to stack-based buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linksys / RE6250 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE6300 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE6350 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE6500 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE7000 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
| Linksys / RE9000 | affected 1.0.013.001; affected 1.0.04.001; affected 1.0.04.002; affected 1.1.05.003; affected 1.2.07.001 |
CWE
CWE-121, CWE-119
References
- https://vuldb.com/?id.321065
- https://vuldb.com/?ctiid.321065
- https://vuldb.com/?submit.631534
- https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_30/30.md
- https://www.linksys.com/
ADP enrichment
No English description supplied.
No references supplied.