CVE-2018-18489

Опубликовано: 16 апр. 2019

Источник: nvd

CVSS3: 4.9

CVSS2: 6.8

EPSS Низкий

Описание

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service (HTTP service termination) by modifying the packet size to be higher than the UI limit of 1472.

Ссылки

https://youtu.be/VGNEYWR9MgY
Exploit
Third Party Advisory
https://youtu.be/VGNEYWR9MgY
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:wr840n_firmware:3.16.9:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr840n:2:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00731

Низкий

4.9 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-6cv2-23h8-f75x