The flaw is a stack-based buffer overflow in the ssid1MACFilter function of the Mac Filter feature on the Linksys E1700 router. By manipulating the newap_text_%d argument, an attacker can overflow a local buffer, potentially corrupting the stack and enabling arbitrary code execution. The vulnerability is exploitable remotely, so an attacker can trigger it from anywhere that can reach the router’s management interface.

The vulnerability affects Linksys E1700 routers running firmware version 1.0.0.4.003. No other vendor or product versions are listed as affected.

The CVSS score of 10 highlights the critical severity of this flaw. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, but the combination of a remote trigger and a stack-based overflow makes the risk extremely high for any exposed device. Because the exploit has been publicly disclosed, the likelihood of exploitation is significant.