{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/e1700-1.0.0.4.003/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:h:linksys:e1700:1.0.0.4.003:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-108892"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["E1700 (1.0.0.4.003)"],"_cs_severities":["critical"],"_cs_tags":["remote-code-execution","buffer-overflow","network-device","cve-2026-108892","vulnerability","network-security"],"_cs_type":"threat","_cs_vendors":["Linksys"],"content_html":"\u003cp\u003eA critical stack-based buffer overflow vulnerability has been identified in the Linksys E1700 router, specifically within firmware version 1.0.0.4.003. The vulnerability resides in the ssid1MACFilter function located within the /goform/ssid1MACFilter endpoint of the Mac Filter component. By submitting a specially crafted argument to the 'newap_text_%d' parameter, an attacker can trigger an overflow on the stack. Because this endpoint is accessible over the network, the attack can be initiated remotely without authentication. The vulnerability has been publicly disclosed, and given the vendor's lack of response, there is an increased risk of active exploitation. Organizations utilizing this hardware should consider it compromised if exposed to untrusted networks.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability leads to a stack-based buffer overflow, which can result in arbitrary code execution or permanent denial-of-service (device crash/brick) of the router. Given the device's role as a network gateway, this could allow an attacker to gain full control over the perimeter, facilitating further lateral movement or traffic interception. There is currently no vendor-provided patch.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately restrict access to the web management interface of all Linksys E1700 devices to trusted, internal-only management networks.\u003c/li\u003e\n\u003cli\u003eDisable the Mac Filter functionality if it is not strictly required for network operations until a security update is released.\u003c/li\u003e\n\u003cli\u003eMonitor perimeter logs for unexpected HTTP POST requests directed toward the /goform/ssid1MACFilter URI.\u003c/li\u003e\n\u003cli\u003eReplace or isolate vulnerable Linksys E1700 hardware from internet-facing deployments.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T15:42:48Z","date_published":"2026-10-12T15:42:31Z","id":"https://feed.craftedsignal.io/briefs/2026-10-linksys-buffer-overflow/","summary":"The Linksys E1700 router (v1.0.0.4.003) is vulnerable to a remote stack-based buffer overflow in the Mac Filter component, allowing for potential unauthenticated remote code execution.","title":"Remote Stack-Based Buffer Overflow in Linksys E1700","url":"https://feed.craftedsignal.io/briefs/2026-10-linksys-buffer-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - E1700 (1.0.0.4.003)","version":"https://jsonfeed.org/version/1.1"}