Buffer Overflow Vulnerability in TP-LINK TL-WR840N Router
CVE-2022-26639

7.2HIGH

Key Information:

Vendor

Tp-link
Status
Tl-wr840n Firmware
Vendor
CVE Published:
28 March 2022

What is CVE-2022-26639?

The TP-LINK TL-WR840N(ES)_V6.20 router is susceptible to a buffer overflow vulnerability that can be exploited through the DNSServers parameter. An attacker could leverage this weakness to execute arbitrary code or cause a denial of service, compromising the device’s integrity and availability. Proper network security measures and regular updates are crucial to mitigate this risk.

References

https://github.com/Quadron-Research-Lab/Hardware-IoT/blob...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.