Linksys E5600 router firmware authentication bypass and memory write flaws
Linksys E5600 routers can be entered by anyone without a password!
Summary
Flaws in the login and firmware upload handling of Linksys E5600 firmware 1.1.0.26 let a remote attacker bypass authentication or read device information. Public exploit code exists, and the vendor no longer supports this product.
What to do
No fixed version exists. The vendor did not respond, and the product is no longer supported.
Update these devices now!
- Linksys E5600
Products and platforms
CVE IDs
Sources
- Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen