Buffer Overflow Vulnerability in Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

CVE-2023-49911

Summary

A stack-based buffer overflow vulnerability affects the web interface's Radio Scheduling feature of the Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point. This vulnerability allows an attacker to send specially crafted HTTP requests that exploit the system, leading to potential remote code execution. The specific overflow occurs via the 'band' parameter in the 'httpd' binary of the device. An attacker must be authenticated to trigger this vulnerability, which exploits the software version of EAP225 V3 and the EAP115. Proper mitigation measures are essential for securing affected devices.

References