Beveiligingsadvies

CVE-2026-41927

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-04 19:20:59

Laatst bijgewerkt 2026-05-11 23:11:50

Toegewezen door VulnCheck

CVSS-score 8.3

Status PUBLISHED

Beschrijving

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request with a Content-Length header exceeding 512 bytes. Attackers can exploit insufficient length validation in the fgets() call to achieve arbitrary code execution through return-oriented programming or return-to-libc techniques.

← Alle CVE's bekijken Bekijk op cve.org ↗