6.5

CVE-2020-28005

Exploit
httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220(EU)_V4_201023
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tl-wpa4220 Firmware
   Tp-link ≫ Tl-wpa4220 Versionv2
Tp-link ≫ Tl-wpa4220 Firmware
   Tp-link ≫ Tl-wpa4220 Versionv3
Tp-link ≫ Tl-wpa4220 Firmware Version < tl-wpa4220\(eu\)_v4_201023
   Tp-link ≫ Tl-wpa4220 Versionv4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.92% 0.74
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:N/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.