Buffer Overflow Remote Code Execution Vulnerability Affects TP-Link Omada ER605 Routers

CVE-2024-5243

What is CVE-2024-5243?

A remote code execution vulnerability has been identified in the TP-Link Omada ER605 router due to a buffer overflow flaw in its DNS name handling. This weakness stems from inadequate validation of user-supplied data length before copying it to a buffer, enabling network-adjacent attackers to potentially execute arbitrary code. Notably, exploitation does not require authentication, although the routers must be configured to use the Comexe DDNS service for the vulnerability to present a risk. This issue represents a significant security threat, allowing attackers to gain control over affected devices.

References