Lucene search

K
nvd[email protected]NVD:CVE-2023-39747
HistoryAug 21, 2023 - 3:15 a.m.

CVE-2023-39747

2023-08-2103:15:11
CWE-120
web.nvd.nist.gov
3
cve-2023-39747
tp-link
buffer overflow
routers
radiussecret parameter

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

43.4%

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.

Affected configurations

Nvd
Node
tp-linktl-wr940n_v2_firmwareMatch-
AND
tp-linktl-wr940n_v2Match-
Node
tp-linktl-wr941nd_v5_firmwareMatch-
AND
tp-linktl-wr941nd_v5Match-
Node
tp-linktl-wr841n_v8_firmwareMatch-
AND
tp-linktl-wr841n_v8Match-
VendorProductVersionCPE
tp-linktl-wr940n_v2_firmware-cpe:2.3:o:tp-link:tl-wr940n_v2_firmware:-:*:*:*:*:*:*:*
tp-linktl-wr940n_v2-cpe:2.3:h:tp-link:tl-wr940n_v2:-:*:*:*:*:*:*:*
tp-linktl-wr941nd_v5_firmware-cpe:2.3:o:tp-link:tl-wr941nd_v5_firmware:-:*:*:*:*:*:*:*
tp-linktl-wr941nd_v5-cpe:2.3:h:tp-link:tl-wr941nd_v5:-:*:*:*:*:*:*:*
tp-linktl-wr841n_v8_firmware-cpe:2.3:o:tp-link:tl-wr841n_v8_firmware:-:*:*:*:*:*:*:*
tp-linktl-wr841n_v8-cpe:2.3:h:tp-link:tl-wr841n_v8:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

43.4%

Related for NVD:CVE-2023-39747