CVE-2020-26561

2020-10-2305:14:25

mitre

www.cve.org

belkin linksys wrt160nl

stack-based buffer overflow

sprintf

create_dir

mini_httpd

arbitrary code execution

product maintenance

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

46.6%

JSON

Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in mini_httpd. Successful exploitation leads to arbitrary code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

research.nccgroup.com/2020/10/20/wrt160nl-cve-2020-26561-bof/