CVE-2023-28760

The TP-Link AX1800 WiFi 6 Router (Archer AX21) is vulnerable to a stack-based buffer overflow in the minidlna-1.1.2/upnpsoap.c component. An unauthenticated attacker on the LAN can exploit an unvalidated db_dir field in the minidlnad service to modify the files.db file. This chain allows for arbi...