The vulnerability of the setDeviceName() function (/goform/setDeviceName) in the microprogrammed software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary commands.

The vulnerability of the setDeviceName function /goform/setDeviceName of Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers lies in the lack of measures to neutralize special elements during the processing of the DeviceName parameter. Exploiting this vulnerability allows an attack...