Linksys E1700 Stack-Based Buffer Overflow Vulnerability in WAN Configuration

A stack-based buffer overflow vulnerability has been identified in the Linksys E1700 router running firmware version 1.0.0.4.003. The issue arises in the WAN configuration function, where the 'DeviceName' and 'lanIp' parameters are not properly validated. This lack of input sanitization allows remote attackers to manipulate these parameters, leading to a buffer overflow that can potentially be exploited to execute arbitrary code. The vulnerability causes the router to crash, disrupting its normal service operations.

Impact

Exploitation of this vulnerability leads to a crash of the router, causing a persistent disruption in its services.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/setWan' endpoint. Include a 'DeviceName' parameter with a payload that exceeds the buffer limit, such as a long string of characters. The router will crash as a result of the stack overflow.