Insufficient Network Segregation in TP-Link Archer Devices
CVE-2019-13267

8.8HIGH

Key Information:

Vendor

Tp-link
Status
Archer C3200 V1 Firmware
Vendor
CVE Published:
27 August 2019

What is CVE-2019-13267?

The TP-Link Archer C3200 V1 and Archer C2 V1 devices exhibit insufficient compartmentalization between host and guest networks established on the same device. This vulnerability allows attackers to exploit the IGMP protocol to facilitate unauthorized data transfers from the host network to the guest network. When a device leaves an IGMP group, it triggers the router to generate an IGMP Membership Query, which is sent to both networks, thus potentially exposing sensitive data via the Group IP field manipulated by the sender.

References

https://orenlab.sise.bgu.ac.il/publications/CrossRouter
x_refsource_MISC
https://www.usenix.org/system/files/woot19-paper_ovadia.pdf
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-13267 : Insufficient Network Segregation in TP-Link Archer Devices