CVE-2007-5474

Published: Sep 5, 2008Modified: Apr 23, 2026

6.3

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Exploitability: 6.8 / Impact: 6.9

Source: NVD

Description

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long.

Affected (2)

Products: Atheros: Ar5416 Ac1e Chipset · Linksys: Wrt350n

1 product

Ar5416 Ac1e Chipset

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Atheros Ar5416 Ac1e Chipset	All versions
Linksys Wrt350n	Version 2.00.17

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://securityreason.com/securityalert/4226

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/495984/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/31012

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44921

Source: cve@mitre.org

http://securityreason.com/securityalert/4226

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/495984/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31012

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44921

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.