CVE-2024-57544

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field lanipaddr is copied to the stack without length verification...

Linksys E8450 security vulnerabilities

The Linksys E8450 is an E-series wireless router from Linksys USA. A buffer overflow vulnerability exists in Linksys E8450 v1.2.00.360516, which originates when the lanipaddr parameter is copied to the stack without length validation, and can be exploited by a remote attacker to execute arbitrary...

PT-2024-10258 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: A buffer overflow issue was discovered, where the lan ipaddr field is copied to the stack without length verification. This could allow a remote attacker to cause a denial of service. The...

D-Link DAP-1325 lan_ipaddr stack buffer overflow vulnerability

D-Link DAP-1325 is a wireless access point/bridge made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network to wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a stack buffer overflow...

CVE-2024-28447

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lanipaddr parameters at /apply.cgi...

CVE-2022-27947

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands such as telnetd via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or ipv6lanlength parameter...

PT-2022-18715

Name of the Vulnerable Software and Affected Versions NETGEAR R8500 version 1.0.2.158 Description The issue allows remote authenticated users to execute arbitrary commands, such as starting the telnetd service, by injecting shell metacharacters into specific parameters in the ipv6 fix.cgi script...

PT-2018-14886

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-673GRU version 1.00b40 Description The issue allows remote attackers to execute arbitrary commands on the device. This is achieved by exploiting an OS command injection vulnerability in the start arpping function of the timer...