CVE-2021-29302

8.1HIGH

Key Information:

Vendor
Tp-link
Status
Tl-wr802n Firmware
Vendor
CVE Published:
12 April 2021

Summary

TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution.

References

https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2...
x_refsource_MISC
https://static.tp-link.com/beta/2021/202103/20210319/TL-W...
x_refsource_MISC
https://www.tp-link.com/us/support/download/tl-wr802n/#Fi...
x_refsource_MISC

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.