CVE-2024-25139

In TP-Link Omada er605 1.0.1 through v2.6 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level. This is fixed in...

CVE-2024-25139

In TP-Link Omada er605 1.0.1 through v2.6 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level. This is fixed in...

CVE-2024-25139

The TP-Link Omada ER605 VPN router (versions 1.0.1 through 2.2.3) is vulnerable to an integer overflow within the cloud-brd binary. This flaw can lead to a heap-based buffer overflow , allowing a remote attacker to achieve code execution at the root level after performing heap shaping. To remedia...