CVE-2018-3950

An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0619 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:tl-r600vpn_firmware:1.3.0:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-r600vpn:3:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:tp-link:tl-r600vpn_firmware:1.2.3:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-r600vpn:2:*:*:*:*:*:*:*

History

03 Feb 2023, 18:02

Type Values Removed Values Added
References (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2018-0619 - Third Party Advisory (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2018-0619 - Exploit, Third Party Advisory

Information

Published : 2018-12-01 04:29

Updated : 2023-12-10 12:44


NVD link : CVE-2018-3950

Mitre link : CVE-2018-3950

CVE.ORG link : CVE-2018-3950


JSON object : View

Products Affected

tp-link

  • tl-r600vpn
  • tl-r600vpn_firmware
CWE
CWE-787

Out-of-bounds Write