The vulnerability of the ipAddrDispose function in TP-Link router microprogramming systems such as TL-WR940N and TL-WR941ND allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the ipAddrDispose function in TP-Link’s router software models TL-WR940N and TL-WR941ND arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code by sending specially...

Stack overflow

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...

CVE-2019-6989

CVE-2019-6989 describes a stack-based buffer overflow in TP-LINK TL-WR940N (and TL-WR941ND) caused by improper bounds checking in ipAddrDispose. The vulnerability can be triggered by specially crafted ICMP echo requests, allowing a remote authenticated attacker to overflow a buffer and execute ar...