Linksys RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers, all running specific firmware versions. The vulnerability arises in the 'setSysAdm' function of the '/goform/setSysAdm' file, where the 'admpasshint' parameter is manipulated, leading to a stack overflow. This flaw allows remote attackers to crash the router, disrupting its services. The vulnerability has been publicly disclosed, and an exploit is available.

Impact

Exploitation of this vulnerability causes the router to crash, disrupting its normal functions and services.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/setSysAdm' with the 'admpasshint' parameter containing a long string. The router will crash as a result of the stack overflow.