Lucene search

K
cveMitreCVE-2023-39747
HistoryAug 21, 2023 - 3:15 a.m.

CVE-2023-39747

2023-08-2103:15:11
CWE-120
mitre
web.nvd.nist.gov
26
cve-2023-39747
buffer overflow
tp-link routers
wlansecurityrpm
nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

43.4%

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.

Affected configurations

Nvd
Node
tp-linktl-wr940n_v2_firmwareMatch-
AND
tp-linktl-wr940n_v2Match-
Node
tp-linktl-wr941nd_v5_firmwareMatch-
AND
tp-linktl-wr941nd_v5Match-
Node
tp-linktl-wr841n_v8_firmwareMatch-
AND
tp-linktl-wr841n_v8Match-
VendorProductVersionCPE
tp-linktl-wr940n_v2_firmware-cpe:2.3:o:tp-link:tl-wr940n_v2_firmware:-:*:*:*:*:*:*:*
tp-linktl-wr940n_v2-cpe:2.3:h:tp-link:tl-wr940n_v2:-:*:*:*:*:*:*:*
tp-linktl-wr941nd_v5_firmware-cpe:2.3:o:tp-link:tl-wr941nd_v5_firmware:-:*:*:*:*:*:*:*
tp-linktl-wr941nd_v5-cpe:2.3:h:tp-link:tl-wr941nd_v5:-:*:*:*:*:*:*:*
tp-linktl-wr841n_v8_firmware-cpe:2.3:o:tp-link:tl-wr841n_v8_firmware:-:*:*:*:*:*:*:*
tp-linktl-wr841n_v8-cpe:2.3:h:tp-link:tl-wr841n_v8:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

43.4%

Related for CVE-2023-39747