CVE-2021-29280 - OpenCVE

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

AV:A/AC:M/Au:N/C:N/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Tp-link	Tl-wr840n Firmware Tl-wr840n

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr840n:-:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/deadlysnowman3308/upgraded-ARP-Poisoning	Exploit Third Party Advisory
https://hackingvila.wordpress.com/2021/04/28/upgraded-arp-poisoning-tool/	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2021-08-19T15:31:55

Updated: 2021-08-19T15:31:55

Reserved: 2021-03-29T00:00:00

Link: CVE-2021-29280

JSON object: View

NVD Information

Status : Analyzed

Published: 2021-08-19T16:15:12.197

Modified: 2021-08-26T18:26:20.400

Link: CVE-2021-29280

JSON object: View

Redhat Information

No data.

CWE

CWE-668

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "559E86BF-489A-451C-B7C8-488E0A8D511C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wr840n:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF3078F3-4CD5-4157-9A2D-7E338B6C7058", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow"}, {"lang": "es", "value": "En el router inal\u00e1mbrico N WR840N de TP-Link, un ataque de envenenamiento ARP puede causar un desbordamiento del b\u00fafer."}], "id": "CVE-2021-29280", "lastModified": "2021-08-26T18:26:20.400", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 5.5, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-08-19T16:15:12.197", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/deadlysnowman3308/upgraded-ARP-Poisoning"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://hackingvila.wordpress.com/2021/04/28/upgraded-arp-poisoning-tool/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-668"}], "source": "nvd@nist.gov", "type": "Primary"}]}