Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/02/06 3:13 a.m.8 views

CVE-2021-35003

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.731645553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted D...

10CVSS7.5AI score0.10576EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/05/18 12:0 a.m.1 views

The vulnerability of TP-Link Archer C90 router’s microprogramming software arises from buffer overflow on the stack, allowing an attacker to execute arbitrary code.

The vulnerability of TP-Link Archer C90 router’s microprogramming software is caused by an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context...

10CVSS8.5AI score0.10576EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2022/01/21 4:15 p.m.2 views

CVE-2021-35003

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.731645553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted D...

9.8CVSS7.7AI score0.10576EPSS
Exploits0References1
NVD
NVD
added 2022/01/21 4:15 p.m.15 views

CVE-2021-35003

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.731645553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted D...

10CVSS0.10576EPSS
Exploits0References1
Prion
Prion
added 2022/01/21 4:15 p.m.13 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.731645553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted D...

10CVSS9.7AI score0.10576EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/21 3:45 p.m.14 views

CVE-2021-35003

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.731645553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted D...

9.8CVSS9.9AI score0.10576EPSS
Exploits0References1
CVE
CVE
added 2022/01/21 3:45 p.m.49 views

CVE-2021-35003

The CVE-2021-35003 vulnerability affects TP-Link Archer C90 routers (1.0.6 Build 20200114 rel.73164(5553)). A flaw in DNS response handling allows a crafted DNS message to overflow a fixed-length, stack-based buffer, enabling remote code execution with root privileges without authentication. Mult...

10CVSS9.8AI score0.10576EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/01/17 12:0 a.m.35 views

TP-Link Archer C90 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow ...

9.8CVSS6.4AI score0.10576EPSS
Exploits0
Rows per page
Query Builder