CVE-2024-25139

In TP-Link Omada er605 1.0.1 through v2.6 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level. This is fixed in...

The vulnerability of TP-Link Omada er605 microcontroller-based software is caused by a full-integer overflow, allowing an attacker to execute arbitrary code.

The vulnerability of TP-Link Omada er605 microprogramming software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code within the context of a binary file named cloud-brd...

CVE-2024-25139

The TP-Link Omada er605 VPN router, specifically versions 1.0.1 through 2.2.3, contains a vulnerability in the cloud-brd binary. A numerical integer overflow occurs when the application processes untrusted input, leading to a heap-based buffer overflow . An attacker can perform heap shaping to ac...