ID
VAR-202403-2113
CVE
CVE-2024-28283
TITLE
Linksys E1000 Buffer Overflow Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2025-02170
DESCRIPTION
There is stack-based buffer overflow vulnerability in pc_change_act function in Linksys E1000 router firmware version v.2.1.03 and before, leading to remote code execution. Linksys E1000 is a router from Linksys, an American company. The vulnerability is caused by the failure to check the buffer input size. Remote attackers can exploit this vulnerability to cause denial of service or code execution
Trust: 1.44
sources:
NVD: CVE-2024-28283 //
CNVD: CNVD-2025-02170
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2025-02170
AFFECTED PRODUCTS
| vendor: | linksys | model: | e1000 | scope: | lte | version: | <=2.1.03 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-02170
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
sources:
CNVD: CNVD-2025-02170 //
NVD: CVE-2024-28283
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
sources:
NVD: CVE-2024-28283
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-28283 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-02170 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-02170 //
NVD: CVE-2024-28283
REFERENCES
| url: | https://d05004.notion.site/linksys-e1000-bof-37b98eec45ea4fc991b9b5bea3db091d?pvs=4 | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-28283 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-02170 //
NVD: CVE-2024-28283
SOURCES
| db: | CNVD | id: | CNVD-2025-02170 |
| db: | NVD | id: | CVE-2024-28283 |
LAST UPDATE DATE
2025-01-25T22:50:10.699000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-02170 | date: | 2025-01-22T00:00:00 |
| db: | NVD | id: | CVE-2024-28283 | date: | 2024-08-06T16:35:08.440 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-02170 | date: | 2025-01-15T00:00:00 |
| db: | NVD | id: | CVE-2024-28283 | date: | 2024-03-19T21:15:07.770 |