Lucene search

[email protected]CVE-2018-3950

HistoryDec 01, 2018 - 4:29 a.m.

CVE-2018-3950

2018-12-0104:29:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2018-3950

exploit

remote code execution

tp-link

tl-r600vpn

stack overflow

http server

security vulnerability

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability.

Affected configurations

Vulners

NVD

Node

talostp-linkRange≤TP-Link TL-R600VPN HWv3 FRNv1.3.0 TP-Link TL-R600VPN HWv2 FRNv1.2.3

CPENameOperatorVersion
tp-link:tl-r600vpn_firmwaretp-link tl-r600vpn firmwareeq1.3.0

CPE	Name	Operator	Version
tp-link:tl-r600vpn_firmware	tp-link tl-r600vpn firmware	eq	1.3.0

CNA Affected

[
  {
    "product": "TP-Link",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "TP-Link TL-R600VPN HWv3 FRNv1.3.0 TP-Link TL-R600VPN HWv2 FRNv1.2.3"
      }
    ]
  }
]