Belkin AX1800 WiFi 6 Router Firmware Update Data Authenticity Vulnerability

A vulnerability exists in the Belkin AX1800 WiFi 6 router, specifically in firmware version 1.1.00.016. The issue arises in the Firmware Update Handler component, where the integrity verification process of the new firmware is inadequate. The router uses CRC32 checks to validate firmware updates, a method that can be easily bypassed. Attackers could craft a malicious firmware file that matches the CRC32 value of a legitimate update, allowing them to replace the genuine firmware with their own. This flaw could lead to arbitrary code execution or a denial-of-service condition on the device.

Impact

Exploitation of this vulnerability could allow for arbitrary code execution on the affected device or cause a denial-of-service condition.