TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
References
| Link | Resource |
|---|---|
| https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
25 Aug 2023, 15:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md - Exploit, Third Party Advisory | |
| CWE | CWE-120 | |
| CPE | cpe:2.3:o:tp-link:tl-wr841n_v8_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr841n_v8:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr940n_v2_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr941nd_v5:-:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n_v2:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr941nd_v5_firmware:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Tp-link tl-wr841n V8 Firmware
Tp-link Tp-link tl-wr940n V2 Tp-link tl-wr940n V2 Firmware Tp-link tl-wr841n V8 Tp-link tl-wr941nd V5 Firmware Tp-link tl-wr941nd V5 |
21 Aug 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-21 03:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-39747
Mitre link : CVE-2023-39747
CVE.ORG link : CVE-2023-39747
JSON object : View
Products Affected
tp-link
- tl-wr941nd_v5_firmware
- tl-wr841n_v8
- tl-wr940n_v2_firmware
- tl-wr940n_v2
- tl-wr941nd_v5
- tl-wr841n_v8_firmware
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')