Exploit for Classic Buffer Overflow in Tp-Link Omada_Er605_Firmware

🗓️ 04 Feb 2026 09:46:43Reported by yi-barrackType

githubexploit🔗 github.com👁 330 Views

Pre-auth remote code execution chain for TP-Link Omada ER605 via cmxddnsd exploiting three vulnerabilities.

Reporter	Title	Published	Views	Family All 37
BDU FSTEC	The vulnerability of the executable file cmxddns in the microprogramming software of TP-Link Omada er605 allows a hacker to execute arbitrary code in the root context.	7 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of TP-Link Omada er605 microcontroller-based software is caused by buffer overflow in the stack, allowing an attacker to execute arbitrary code.	7 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of TP-Link Omada er605’s microprogramming software arises from incorrect processing of DDNS error codes, allowing a intruder to execute any arbitrary code in the root context.	7 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-5242	10 Jul 202417:39	–	circl
Circl	CVE-2024-5243	10 Jul 202417:39	–	circl
Circl	CVE-2024-5244	10 Jul 202417:39	–	circl
CNNVD	TP-Link Omada ER605 安全漏洞	23 May 202400:00	–	cnnvd
CNNVD	TP-Link Omada ER605 安全漏洞	23 May 202400:00	–	cnnvd
CNNVD	TP-Link Omada ER605 安全漏洞	23 May 202400:00	–	cnnvd
CVE	CVE-2024-5242	23 May 202421:55	–	cve

04 Feb 2026 10:02Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 37.5

EPSS0.00828

SSVC

tp link er605 cmxddnsd daemon remote code execution buffer overflow hardcoded credentials