Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the (1) ping_addr parameter to PingIframeRpm.htm or (2) dnsserver2 parameter to WanStaticIpV6CfgRpm.htm.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/158999/TP-Link-WDR4300-Remote-Code-Execution.html | |
https://www.exploit-db.com/exploits/43022/ | Third Party Advisory VDB Entry |
https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-23T18:00:00
Updated: 2020-08-31T16:06:19
Reserved: 2017-08-30T00:00:00
Link: CVE-2017-13772
JSON object: View
NVD Information
Status : Modified
Published: 2017-10-23T18:29:00.883
Modified: 2020-08-31T17:15:11.873
Link: CVE-2017-13772
JSON object: View
Redhat Information
No data.
CWE