E8450
Monthly
Stack-based buffer overflow in Linksys E8450 firmware 1.2.00.360516 allows remote, unauthenticated attackers to overwrite stack memory by sending an overlong hidden_timezone value to /www/cgi-bin/portal.cgi, with high confidentiality, integrity, and availability impact scored. The vuln.today decision is act_now, but exposure depends on reachability of the router's HTTP management interface and is bounded to the named firmware. No vendor patch or CISA KEV listing is provided, and no public exploit identified at time of analysis; the CVSS 4.0 vector nevertheless records E:P.
Stack-based buffer overflow in Linksys E8450 firmware 1.2.00.360516 allows remote, unauthenticated attackers to overwrite stack memory by sending an overlong hidden_timezone value to /www/cgi-bin/portal.cgi, with high confidentiality, integrity, and availability impact scored. The vuln.today decision is act_now, but exposure depends on reachability of the router's HTTP management interface and is bounded to the named firmware. No vendor patch or CISA KEV listing is provided, and no public exploit identified at time of analysis; the CVSS 4.0 vector nevertheless records E:P.