Multiple Linksys range extender models contain a critical stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code or cause a persistent denial of service.

The vulnerability exists in the setVlan function within the /goform/setVlan endpoint, where the vlan_set parameter fails to perform adequate bounds checking before copying data to a local stack variable. This flaw requires low-level authenticated access to trigger, allowing an attacker to overwrite the function return address and achieve remote code execution.

Successful exploitation of this vulnerability poses a severe risk to network integrity and availability. An attacker could gain unauthorized control over the affected range extender, potentially intercepting traffic or using the device as a pivot point to move laterally within the local network. With a CVSS score of 8.8, this vulnerability represents a high-severity threat that could lead to complete system compromise and significant operational downtime.

Immediate Action: As no vendor patch is currently available, immediately restrict access to the web management interface of the affected devices to trusted IP addresses only.

Proactive Monitoring: Monitor network traffic for unusual POST requests directed at the /goform/setVlan endpoint and review system logs for signs of recurrent device crashes or unauthorized management access.

Compensating Controls: Implement a Web Application Firewall (WAF) or equivalent network inspection tool to filter or block HTTP requests containing abnormally long strings in the vlan_set parameter.

Public Exploit Available: Yes, a functional proof-of-concept has been published in a security research repository detailing the attack vector.

Given the availability of a public proof-of-concept and the lack of a vendor-provided security patch, users must prioritize isolating these devices from external network exposure. Administrators should ensure these devices are not reachable from the public internet and continue to monitor for official firmware updates from Linksys to remediate this memory corruption flaw permanently.