Buffer Overflow Vulnerability in TP-Link Routers
CVE-2023-33536

8.1HIGH

Key Information:

Vendor
Tp-link
Vendor
CVE Published:
7 June 2023

Summary

A buffer overflow vulnerability has been identified in specific TP-Link router models, namely TL-WR940N, TL-WR841N, and TL-WR740N. This vulnerability is found in the component responsible for WLAN MAC filtering, located at /userRpm/WlanMacFilterRpm. Exploiting this flaw may allow an attacker to execute arbitrary code or alter the router's behavior, potentially compromising the confidentiality and integrity of network traffic. It is crucial for users of these devices to apply mitigations or updates provided by TP-Link to ensure the security and stability of their network environments.

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.