A critical stack-based buffer overflow vulnerability in multiple Linksys range extender models poses a severe risk of remote service disruption and potential arbitrary code execution.

This vulnerability is a stack-based buffer overflow occurring in the setDMZ function within the /goform/setDMZ endpoint. An attacker with low-level privileges can supply a malformed DMZIPAddress parameter, which lacks necessary input validation, leading to memory corruption and potential code execution.

The ability to remotely trigger a buffer overflow in network infrastructure devices carries significant risk, including persistent denial of service and unauthorized system control. With a CVSS score of 8.8, this flaw represents a high-severity threat that could lead to the complete compromise of network segments if the device is used as a pivot point for further exploitation.

Immediate Action: As no vendor patch is currently available, administrators should restrict access to the management interface of the affected devices to trusted internal IP addresses only.

Proactive Monitoring: Monitor device logs and network traffic for unusual POST requests directed at the /goform/setDMZ endpoint or unexpected device reboots.

Compensating Controls: Deploy a Web Application Firewall or an Access Control List to block or sanitize traffic destined for the administrative /goform/ endpoints of these devices.

Public Exploit Available: Yes, a published proof-of-concept exists via the researcher's write-up on GitHub.

Given the availability of a public proof-of-concept and the lack of a vendor-provided security update, immediate defensive action is required. Organizations should isolate the affected Linksys range extenders from external networks and monitor for signs of unauthorized access until an official firmware patch is released and applied.