Threats tagged 'ghsa-rh2v-jr94-g2vf'

A critical authentication bypass vulnerability exists in Linksys E5350 version 1.0.00.037 in the Setup Wizard component. The flaw is triggered by manipulating the wizard_router_pwd argument in the save_settings function of /wizard/apply.cgi. This vulnerability can be exploited remotely without authentication, potentially allowing full compromise. Public exploit code is available, but the vendor has not responded or issued a patch.