A critical stack-based buffer overflow vulnerability in multiple Linksys range extenders allows remote attackers to disrupt service or achieve remote code execution.

This is a stack-based buffer overflow occurring in the setRIP function within the mod_form.so binary. An authenticated attacker can trigger this condition by sending an overly long string to the RIPmode or RIPpasswd arguments via the /goform/setRIP endpoint.

The vulnerability carries a CVSS score of 8.8, indicating high severity. Successful exploitation results in complete service disruption (denial of service) or the potential for arbitrary code execution on the networking hardware. This poses a significant risk to network availability and internal security, as compromised range extenders can serve as a persistent foothold for attackers within the local network environment.

Immediate Action: Monitor the Linksys support portal for firmware updates addressing this buffer overflow and apply them immediately to all affected devices.

Proactive Monitoring: Review device logs for unusual POST requests directed at the /goform/setRIP endpoint and monitor for unexpected service crashes or reboots.

Compensating Controls: Restrict management access to the web interface to trusted administrative IP addresses only, and utilize network segmentation to isolate these devices from critical infrastructure.

Public Exploit Available: Yes, a functional proof-of-concept is publicly available via a researcher's GitHub repository.

Given the availability of a public proof-of-concept and the potential for remote code execution, this vulnerability poses a severe risk to network integrity. Administrators should prioritize the deployment of vendor security updates as soon as they become available. In the interim, implement strict access controls for the device management interface to prevent unauthorized access to the vulnerable endpoint.