Buffer Overflow Vulnerability in Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

CVE-2023-49913

Summary

A stack-based buffer overflow vulnerability in the web interface's Radio Scheduling functionality of the Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point has been identified. An attacker with valid authentication can exploit this vulnerability by sending a specially crafted series of HTTP requests, which may lead to remote code execution. The overflow occurs specifically in the action parameter at offset 0x422448 within the httpd binary bundled with certain versions of the device. The affected versions include EAP225 V3 v5.1.0 Build 20220926 and EAP115 v5.0.4 Build 20220216.

References