CVE-2023-39751

Опубликовано: 21 авг. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.

Ссылки

https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/20/WR941ND_userRpm_PingIframeRpm_buffer_write_out-of-bounds_vulnerability.md
Exploit
Third Party Advisory
https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/20/WR941ND_userRpm_PingIframeRpm_buffer_write_out-of-bounds_vulnerability.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-wr941nd_v6_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr941nd_v6:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11596

Средний

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-4fwp-qhrc-5p5x

CVSS3: 9.8

github

больше 2 лет назад