CVE-2020-28005

Опубликовано: 18 нояб. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 3.5

EPSS Низкий

Описание

httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220(EU)_V4_201023

Ссылки

https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220/
Exploit
Third Party Advisory
https://www.tp-link.com/us/security
Vendor Advisory
https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220/
Exploit
Third Party Advisory
https://www.tp-link.com/us/security
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-wpa4220_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wpa4220:v2:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:tp-link:tl-wpa4220_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wpa4220:v3:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:tp-link:tl-wpa4220_firmware:*:*:*:*:*:*:*:*

Версия до tl-wpa4220\(eu\)_v4_201023 (исключая)

cpe:2.3:h:tp-link:tl-wpa4220:v4:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00921

Низкий

6.5 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-94q8-gmc5-fvp3

github

больше 3 лет назад

EPSS

Процентиль: 75%

0.00921

Низкий

6.5 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-120