CVE-2021-41653

Опубликовано: 13 нояб. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Критический

Описание

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.

Ссылки

http://tp-link.com
Vendor Advisory
https://k4m1ll0.com/cve-2021-41653.html
Exploit
Third Party Advisory
https://www.tp-link.com/us/press/security-advisory/
Vendor Advisory
http://tp-link.com
Vendor Advisory
https://k4m1ll0.com/cve-2021-41653.html
Exploit
Third Party Advisory
https://www.tp-link.com/us/press/security-advisory/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-wr840n_firmware:*:*:*:*:*:*:*:*

Версия до tl-wr840n\(eu\)_v5_171211 (включая)

cpe:2.3:h:tp-link:tl-wr840n:v5:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.91914

Критический

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-8fx7-hx38-cm88

github

больше 3 лет назад