Heap-based Buffer Overflow Remote Code Execution Vulnerability Affects TP-Link Omada ER605 Routers

CVE-2024-5228

What is CVE-2024-5228?

A newly discovered buffer overflow vulnerability in TP-Link's Omada ER605 routers, specifically during the handling of DNS responses, could allow remote attackers to execute arbitrary code. This issue stems from inadequate validation of user-supplied data length before it is copied to a fixed-length heap-based buffer. The vulnerability is particularly concerning for those using the Comexe DDNS service, as no authentication is needed to exploit it. Protect your devices by avoiding this configuration or applying necessary updates.

References