peter bassill · operator
$ cve CVE-2006-5882 JSON

CVE-2006-5882 EXPLOIT

8.3
HIGH · CVSS 2.0 · EPSS 13.1% (pctl 96)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field.

Scoring

CVSS8.3 (HIGH, v2.0)
VectorAV:A/AC:L/Au:N/C:C/I:C/A:C
EPSS13.11% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2006-11-14
Last modified2026-06-16

Affected (2)

VendorProduct
broadcombcmwl5.sys wireless device driver
linksyswpc300n wireless-n notebook adapter driver

Public exploits

SourceTitleDate
exploit-dbBroadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)2006-11-13

References

→ the Explorer  ·  watch your stack  ·  NVD