Arbitrary Code Execution Vulnerability in TP-Link AC1750 Routers
CVE-2022-24354

8.8HIGH

Key Information:

Vendor
Tp-link
Status
Ac1750
Vendor
CVE Published:
18 February 2022

Summary

This vulnerability exposes TP-Link AC1750 routers to potential exploitation by network-adjacent attackers, enabling them to execute arbitrary code without the need for authentication. The flaw lies within the NetUSB.ko module, where insufficient validation of user-supplied data leads to an integer overflow, resulting in buffer allocation issues. By leveraging this vulnerability, attackers can gain root-level access, putting the security of affected devices at significant risk.

Affected Version(s)

AC1750 prior to 1.1.4 Build 20211022 rel.59103(5553)

References

https://www.zerodayinitiative.com/advisories/ZDI-22-264/
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Axel '0vercl0k' Souchet from https://doar-e.github.io/
.