Design/Logic Flaw

2018-09-1318:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.1%

JSON

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for ddns phddns username.

CPENameOperatorVersion
tl-wr886n_firmwareeq6.0.234
tl-wr886n_firmwareeq7.0.110

CPE	Name	Operator	Version
	tl-wr886n_firmware	eq	6.0.234
	tl-wr886n_firmware	eq	7.0.110

References

github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_11/README.md