7.7

CVE-2023-36358

Exploit

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tl-wr940n Firmware Version-
   Tp-link ≫ Tl-wr940n Versionv4
Tp-link ≫ Tl-wr841n Firmware Version-
   Tp-link ≫ Tl-wr841n Versionv8
Tp-link ≫ Tl-wr940n Firmware Version-
   Tp-link ≫ Tl-wr940n Versionv2
Tp-link ≫ Tl-wr940n Firmware Version-
   Tp-link ≫ Tl-wr940n Versionv3
Tp-link ≫ Tl-wr941nd Firmware Version-
   Tp-link ≫ Tl-wr941nd Versionv5
Tp-link ≫ Tl-wr941nd Firmware Version-
   Tp-link ≫ Tl-wr941nd Versionv6
Tp-link ≫ Tl-wr743nd Firmware Version-
   Tp-link ≫ Tl-wr743nd Versionv1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.255
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.7 3.1 4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.7 3.1 4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.