Buffer Overflow Vulnerability in TP-Link Wireless Routers

CVE-2023-36359

Summary

A buffer overflow vulnerability has been identified in TP-Link’s wireless routers, including models TL-WR940N and TL-WR841N. Specifically, the issue arises in the component /userRpm/QoSRuleListRpm, allowing attackers to exploit this flaw by sending specially crafted GET requests. Successful exploitation can lead to a Denial of Service (DoS), potentially rendering the affected devices inoperable. Users are advised to apply security patches released by TP-Link to mitigate this risk.

References