7.5

CVE-2023-36354

Exploit

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tl-wr940n Firmware Version-
   Tp-link ≫ Tl-wr940n Versionv4
Tp-link ≫ Tl-wr841n Firmware Version-
   Tp-link ≫ Tl-wr841n Versionv8
Tp-link ≫ Tl-wr841n Firmware Version-
   Tp-link ≫ Tl-wr841n Versionv10
Tp-link ≫ Tl-wr740n Firmware Version-
   Tp-link ≫ Tl-wr740n Versionv1
Tp-link ≫ Tl-wr740n Firmware Version-
   Tp-link ≫ Tl-wr740n Versionv2
Tp-link ≫ Tl-wr940n Firmware Version-
   Tp-link ≫ Tl-wr940n Versionv2
Tp-link ≫ Tl-wr940n Firmware Version-
   Tp-link ≫ Tl-wr940n Versionv3
Tp-link ≫ Tl-wr941nd Firmware Version-
   Tp-link ≫ Tl-wr941nd Versionv5
Tp-link ≫ Tl-wr941nd Firmware Version-
   Tp-link ≫ Tl-wr941nd Versionv6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.299
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.