CVE-2022-26987

7.8HIGH

Key Information:

Vendor
Tp-link
Status
Tl-wdr7660 Firmware
Vendor
CVE Published:
10 May 2022

Summary

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in MmtAtePrase function. Local users could get remote code execution.

References

http://tp-link.com
x_refsource_MISC
https://drive.google.com/file/d/1SnNoqRlJiBD673UROLwdgg_r...
x_refsource_MISC
https://github.com/GANGE666
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.