Stack overflow

TP-Link Archer A54 Archer A54USV1210111 routers were discovered to contain a stack overflow in the function DM Fillobjbystr. This vulnerability allows unauthenticated attackers to execute arbitrary code...

Stack overflow

TP-Link TL-WR902ACUSV3191209 routers were discovered to contain a stack overflow in the function DM Fillobjbystr. This vulnerability allows unauthenticated attackers to execute arbitrary code...

Tp-Link Tl-Wr902Ac 缓冲区错误漏洞

Tp-Link Tl-Wr902Ac is an Ac750 travel router from Tp-Link in China.A buffer error vulnerability exists in the TP-Link TL-WR902AC router, which stems from a stack overflow in the function DMFillobjbystr. An unauthenticated attacker can exploit this vulnerability to execute arbitrary code...

CVE-2022-25074

TP-Link TL-WR902ACUSV3191209 routers were discovered to contain a stack overflow in the function DM Fillobjbystr. This vulnerability allows unauthenticated attackers to execute arbitrary code...

CVE-2022-25074

CVE-2022-25074 affects TP-Link TL-WR902AC(US)_V3_191209 devices. A stack overflow in the function DM_Fillobjbystr() allows unauthenticated, network‑based remote code execution with high impact (confidentiality, integrity, and availability). No remediation or exploit status details are provided in...

CVE-2022-25072

TP-Link Archer A54 Archer A54USV1210111 routers were discovered to contain a stack overflow in the function DM Fillobjbystr. This vulnerability allows unauthenticated attackers to execute arbitrary code...

CVE-2022-25072

TP-Link Archer A54 routers (US_V1_210111) are affected by a stack overflow in the DM_Fillobjbystr() function. The root cause is a stack overflow vulnerability that allows unauthenticated attackers to execute arbitrary code, as indicated across CVE-2022-25072 records. The reported impact is unauth...

TP-Link TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n, which originates from a failure to properly validate the length of user-supplied data before copying it to a fixed-length stack-based...

TP-Link TL-WR940N httpd newBridgessid Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue...

TP-Link TL-WR940N 缓冲区错误漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n, which originates from a failure to properly validate the length of user-supplied data before copying it to a fixed-length stack-based...

The vulnerability of TP-Link TL-WR940N router’s microprogramming software lies in the overflow of buffers on the stack, allowing an attacker to execute arbitrary code.

The vulnerability of TP-Link TL-WR940N router’s microprogramming software is related to buffer overflows during syntax analysis of file extension names. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

TP-LINK TL-WR940N 访问控制错误漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. An access control error vulnerability exists in TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n, which stems from incorrect authentication...

TP-Link TL-WR940N httpd ssid1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue...

TP-Link TL-WR940N httpd Improper Access Control Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...

CVE-2022-24354

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The...

CVE-2022-24354

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The...

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...

CVE-2022-24354

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The...

CVE-2022-24355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of file name...