Summary
generated automatically from NVD dataLinksys E8450 firmware 1.2.00.360516 contains a stack-based buffer overflow in the /www/cgi-bin/portal.cgi file, where a strcpy call mishandles the hidden_timezone argument. A remote attacker can trigger the flaw over the network, potentially compromising confidentiality, integrity and availability of the device. The issue is rated CRITICAL with a CVSS v3.1 score of 10.0 (CWE-119), and the vendor reportedly did not respond to the disclosure.
NVD description
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.
In-depth analysis on cveo.tech
This CVE is covered in an article: context, affected versions and published fixes.
CVSS v3.1 Score
Information
- Published
- 2 nov. 2026
- Updated
- 2 nov. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.