A critical stack-based buffer overflow vulnerability in multiple Linksys range extenders allows remote attackers to trigger memory corruption and potential code execution.

The vulnerability exists in the check_port_conflict function within the /goform/check_port_conflict endpoint, where the parameters single_port_rule and port_range_rule are processed without adequate length validation. This flaw enables a remote, authenticated attacker to overwrite the stack return address through a crafted HTTP POST request.

The exploitation of this vulnerability can lead to complete service disruption or remote code execution on network infrastructure devices. Given the CVSS score of 8.8, this poses a significant risk to network availability and integrity. Compromise of these devices could provide an attacker with a foothold to conduct further lateral movement within the local network environment.

Immediate Action: Since the vendor has not provided a security update, administrators should immediately restrict access to the device management interface to trusted internal segments only.

Proactive Monitoring: Monitor network traffic for anomalous HTTP POST requests directed at the /goform/check_port_conflict endpoint and track device uptime for unexpected reboots.

Compensating Controls: Implement Web Application Firewall (WAF) rules or network access control lists to block or sanitize malicious input strings sent to the identified vulnerable parameters.

Public Exploit Available: Yes, a proof-of-concept is documented in the technical write-up provided by the researcher at the referenced GitHub repository.

Due to the lack of an official patch, the risk of exploitation remains high for all affected Linksys range extenders. Organizations must prioritize segmenting these devices from public-facing networks and enforce strict authentication controls until the vendor releases a firmware update to address this buffer overflow.