Описание
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.9.1 (включая)
Одновременно
cpe:2.3:o:tp-link:tl-wr902ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wr902ac:3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.69672
Средний
8.8 High
CVSS3
Дефекты
CWE-434
CWE-434
Связанные уязвимости
CVSS3: 8.8
github
около 3 лет назад
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.
EPSS
Процентиль: 99%
0.69672
Средний
8.8 High
CVSS3
Дефекты
CWE-434
CWE-434