Stack Overflow Vulnerability in TP-LINK TL-WR886N Router
CVE-2023-46535

9.8CRITICAL

Key Information:

Vendor

Tp-link
Status
Tl-wr886n Firmware
Vendor
CVE Published:
25 October 2023

What is CVE-2023-46535?

A stack overflow vulnerability has been identified in the TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin firmware. The issue arises from the getResetVeriRegister function, allowing attackers to potentially exploit the vulnerability to execute malicious code or cause a denial of service. This highlights the importance of updating affected devices to secure models or firmware versions to mitigate such risks.

References

https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=1...
https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR8...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.