PT-2024-10258 · Linksys · Linksys E8450

Wood1314 · Published 2024-12-26 · Updated 2025-01-22 · CVE-2024-57544

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Linksys E8450 version 1.2.00.360516

Description A buffer overflow issue was discovered, where the lan ipaddr field is copied to the stack without length verification. This could allow a remote attacker to cause a denial of service. The vulnerability is related to the sub 422eb8 function and the strcpy parameter, which involves copying a buffer without checking the size of the input data.

Recommendations For Linksys E8450 version 1.2.00.360516, consider disabling the sub 422eb8 function as a temporary workaround until a patch is available. Restrict access to the lan ipaddr field to minimize the risk of exploitation. Avoid using the strcpy parameter in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-00655

CVE-2024-57544

Affected Products

Linksys E8450

References · 6

• 🔥 https://github.com/Wood1314/Linksys_E8450_vul/blob/main/6/6.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57544 · Security Note
• https://bdu.fstec.ru/vul/2025-00655 · Security Note
• https://osv.dev/vulnerability/CVE-2024-57544 · Vendor Advisory
• https://twitter.com/CVEnew/status/1881806589696614403 · Twitter Post
• https://vuldb.com/?id.292862 · Note