Arbitrary Code Execution in TP-Link TL-WR940N Router Due to Buffer Overflow

CVE-2022-0650

Summary

The TP-Link TL-WR940N router has a vulnerability that can be exploited by attackers on the same network, allowing them to execute arbitrary code. This flaw in the httpd service, which runs on TCP port 80, stems from inadequate validation of the length of user-supplied data before it is copied to a fixed-length buffer. By manipulating this weakness, an authenticated attacker can run code with root privileges, potentially compromising the entire device.

References