PT-2024-10254 · Linksys · Linksys E8450

Wood1314 · Published 2024-12-26 · Updated 2025-01-21 · CVE-2024-57540

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linksys E8450 version 1.2.00.360516

Description A buffer overflow issue was discovered, where the action field is copied to the stack without length verification. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is related to the sub 422eb8 function in the Wi-Fi router's firmware.

Recommendations For Linksys E8450 version 1.2.00.360516, consider disabling the sub 422eb8 function as a temporary workaround until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the action field in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-00651

CVE-2024-57540

Affected Products

Linksys E8450

References · 6

• 🔥 https://github.com/Wood1314/Linksys_E8450_vul/blob/main/2/2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57540 · Security Note
• https://osv.dev/vulnerability/CVE-2024-57540 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00651 · Security Note
• https://vuldb.com/?id.292868 · Note
• https://twitter.com/CVEnew/status/1881806585552658672 · Twitter Post