Threats tagged 'ghsa-vp98-45w4-xm4m'

A critical security flaw exists in Linksys EA8100 firmware version 1.0.3.216940 in the SMB Service component. The vulnerability involves improper initialization caused by manipulation of the ANON_ACCESS argument in the etc/init.d/service_smbd.sh script. This flaw can be exploited remotely without authentication, leading to complete compromise of confidentiality, integrity, and availability. Public exploit code is available, but the vendor has not responded or issued a fix.