CVE-2023-46525

2023-10-2518:17:38

CWE-787

[email protected]

web.nvd.nist.gov

tp-link

tl-wr886n

stack overflow

loginregister

function

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.3%

JSON

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister.

Affected configurations

Nvd

Node

tp-linktl-wr886n_firmwareMatch3.0.14

AND

tp-linktl-wr886nMatch7.0

VendorProductVersionCPE
tp-linktl-wr886n_firmware3.0.14cpe:2.3:o:tp-link:tl-wr886n_firmware:3.0.14:*:*:*:*:*:*:*
tp-linktl-wr886n7.0cpe:2.3:h:tp-link:tl-wr886n:7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	tl-wr886n_firmware	3.0.14	cpe:2.3:o:tp-link:tl-wr886n_firmware:3.0.14:::::::*
tp-link	tl-wr886n	7.0	cpe:2.3:h:tp-link:tl-wr886n:7.0:::::::*