PT-2025-27044 · Linksys · Linksys E8450
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linksys E8450 versions up to 1.2.00.360516
Description:
A critical vulnerability was found in the Linksys E8450, affecting the
set device language function of the portal.cgi file in the HTTP POST Request Handler component. The manipulation of the dut language argument leads to a buffer overflow. This issue can be exploited remotely. The exploit has been publicly disclosed.Recommendations:
For Linksys E8450 versions up to 1.2.00.360516, as a temporary workaround, consider disabling the
set device language function until a patch is available. Restrict access to the portal.cgi file to minimize the risk of exploitation. Avoid using the dut language argument in the affected HTTP POST Request Handler until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linksys E8450