Insufficient Compartmentalization in TP-Link Archer C3200 and Archer C2 Products
CVE-2019-13266

8.8HIGH

Key Information:

Vendor

Tp-link
Status
Archer C3200 V1 Firmware
Vendor
CVE Published:
27 August 2019

What is CVE-2019-13266?

The TP-Link Archer C3200 V1 and Archer C2 V1 devices exhibit insufficient compartmentalization between the host and guest networks. When a DHCP Request is sent with a specific Transaction ID, the router's response can erroneously allow the same Transaction ID to be sent to both networks. This flaw enables potential data encoding transmissions to be directed across the router, creating a risk of unauthorized data access and communication between isolated networks.

References

https://orenlab.sise.bgu.ac.il/publications/CrossRouter
x_refsource_MISC
https://www.usenix.org/system/files/woot19-paper_ovadia.pdf
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-13266 : Insufficient Compartmentalization in TP-Link Archer C3200 and Archer C2 Products