Описание
TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in MmtAtePrase function. Local users could get remote code execution.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wdr7660:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:tp-link:tl-wdr7661_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wdr7661:-:*:*:*:*:*:*:*
Конфигурация 3
Одновременно
cpe:2.3:o:tp-link:tl-wdr7620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wdr7620:-:*:*:*:*:*:*:*
Конфигурация 4
Одновременно
cpe:2.3:o:tp-link:tl-wdr5660_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wdr5660:-:*:*:*:*:*:*:*
Конфигурация 5
Одновременно
cpe:2.3:o:mercusys:mercury_d196g_firmware:20200109_2.0.4:*:*:*:*:*:*:*
cpe:2.3:h:mercusys:mercury_d196g:-:*:*:*:*:*:*:*
Конфигурация 6
Одновременно
cpe:2.3:o:fastcom:fac1900r_firmware:20190827_2.0.2:*:*:*:*:*:*:*
cpe:2.3:h:fastcom:fac1900r:-:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00536
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.
EPSS
Процентиль: 67%
0.00536
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-787