A critical stack-based buffer overflow in Linksys E1200 v2 routers allows unauthenticated remote attackers to achieve arbitrary code execution or cause a denial of service.

The vulnerability exists in the apply_cgi and block_cgi functions, which utilize sprintf to copy user-supplied input from the url CGI parameter into stack buffers without performing bounds checking. This flaw allows an unauthenticated attacker to trigger a buffer overflow by sending crafted HTTP requests.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code on the affected router, potentially leading to a complete compromise of the device. Given the CVSS score of 8.8, this poses a significant risk to network integrity, as compromised routers can be used to intercept traffic, redirect users to malicious sites, or serve as entry points for further lateral movement within the local network.

Immediate Action: Since no official patch is currently identified, administrators should immediately restrict access to the web management interface and isolate affected routers from the public internet.

Proactive Monitoring: Monitor network traffic for anomalous HTTP requests directed at the router, specifically looking for unusually long strings or malformed parameters within the url field.

Compensating Controls: Deploy a network-level firewall or Intrusion Prevention System (IPS) to filter incoming traffic and block unauthorized access to the router management interface.

Public Exploit Available: Yes, a published proof-of-concept exists via the technical write-up referenced in the CVE record.

The severity of this vulnerability, combined with the availability of a proof-of-concept, necessitates immediate action. Organizations utilizing Linksys E1200 v2 hardware should prioritize isolating these devices from external access until a vendor-supplied firmware update is verified and applied.