Linksys E1700: Stack-based buffer overflow in MAC filter function
Summary
The web interface of the Linksys E1700 router with firmware 1.0.0.4.003 contains a stack-based buffer overflow in the ssid1MACFilter function at /goform/ssid1MACFilter. An attacker can send an overlong newap_text_%d parameter to crash the router, and the vulnerability may also allow arbitrary code execution. A public proof of concept exists, the attack may be initiated remotely, and the vendor did not respond to the disclosure.
Affected
- Linksys E1700, firmware 1.0.0.4.003
- Other firmware versions: Unknown.
Fixed in
Unknown. No vendor fix has been published.
Workaround
- No vendor mitigation is published.
- Remove remote management and internet-facing access to the web interface; only the LAN should reach it.
- Place the device behind a firewall or isolate it from untrusted networks.
Exploitation
- Public proof of concept: Yes, publicly disclosed.
- CISA SSVC: Exploitation poc, automatable yes, technical impact total.
- Known exploitation in the wild: Unknown.
- CISA KEV listing: None found.
Our recommendation
- Check whether any E1700 runs firmware 1.0.0.4.003.
- Block all remote access to the router's web interface immediately.
- Replace the device with a supported model if no fix becomes available, since the product appears to be old and unpatched.
- Monitor the device for crashes or unexpected reboots.
- Treat LAN-only devices as medium priority, because a compromised client could still reach the interface.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulDB CVE record vuldb.com
- VulDB entry 416684 vuldb.com
- Exploit reference (GitHub) github.com
- HOL CVE entry hol.org
- PSIRT CVE entry psirt.com
- Linksys E1700 release notes (v1.0.04) downloads.linksys.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 02:31.
Original description (NVD)
A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation of the argument newap_text_%d causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.