The vulnerability of the um_red() function (/goform/RP_setBasicAuto) in the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary commands.

The vulnerability of the umred function /goform/RPsetBasicAuto of the microprogrammed routing devices Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 is related to the failure to take measures to neutralize special elements during the processing of the hname parameter. Exploiting this...