CVE-2007-5474
7.8 High
AI Score
Confidence
High
6.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:N/I:N/A:C
0.015 Low
EPSS
Percentile
86.6%
The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long.
| CPE | Name | Operator | Version |
|---|---|---|---|
| atheros:ar5416-ac1e_chipset | atheros ar5416-ac1e chipset | eq | * |
| linksys:wrt350n | linksys wrt350n | eq | 2.00.17 |
Related
7.8 High
AI Score
Confidence
High
6.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:N/I:N/A:C
0.015 Low
EPSS
Percentile
86.6%