Threats tagged 'ghsa-rqwp-qx4w-fv82'

A medium-severity vulnerability exists in Linksys E5600 version 1.1.0.26 affecting the strcpy function in /cgi-bin/mesh_login.cgi. This flaw involves an out-of-bounds write triggered by manipulation of certain JSON request parameters. The vulnerability can be exploited remotely and public exploit code is available. The affected product is no longer supported by the vendor, and no patch or vendor response has been provided.