Condi Malware Strikes TP-Link Routers for DDoS Rampage

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Condi, a recently discovered malware, utilizes a security vulnerability within TP-Link Archer Wi-Fi routers to ensnare these devices into a botnet specifically designed for launching distributed...

CVE-2023-36354

The CVE-2023-36354 entry concerns TP-Link TL-WR940N (V4; also V2/V3), TL-WR841N (V8/V10), TL-WR740N (V1/V2), and TL-WR941ND (V5/V6), with a buffer overflow in the /userRpm/AccessCtrlTimeSchedRpm component that enables a Denial of Service via a crafted GET request. The connected sources corroborat...

CVE-2023-36354

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36354

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a buffer overflow vulnerability contained in the component AccessCtrlAccessTargetsRPM. An attacker could exploit this vulnerability to cause a denial...

PT-2023-3653 · Tp Link · Tp-Link Tl-Wr941Nd +2

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V6 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR941ND version V5 Description: The issue is related to errors in resource release, allowing a remote attacker to cause a Denial of Service DoS usin...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a buffer overflow vulnerability contained in the component QoSRuleListRPM. An attacker could exploit the vulnerability to cause a denial of service D...

CVE-2023-36358

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36355

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36356

CVE-2023-36356 affects TP-Link TL-WR940N (V2/V4/V6), TL-WR841N (V8), TL-WR941ND (V5) and TL-WR740N (V1/V2). The issue is a buffer read out-of-bounds in the /userRpm/VirtualServerRpm endpoint, allowing a crafted GET request to trigger a Denial of Service. Public documents confirm the vulnerable co...

CVE-2023-36358

CVE-2023-36358 affects TP-Link router models TL-WR940N (V2/V3/V4), TL-WR941ND (V5/V6), TL-WR743ND (V1), and TL-WR841N (V8). The issue is a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm that can cause a Denial of Service (DoS) via a crafted GET request. The information consi...

CVE-2023-36355

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36357

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36359

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-36356

TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

部分TP-LINK产品 安全漏洞

The TP-LINK TL-WR940N, among others, is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Wireless Routers that stems from a buffer overflow vulnerability contained in the component AccessCtrlTimeSchedRPM. An attacker could exploit this vulnerability to cause a...

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a security issue in the component LocalManageControlRpm. An attacker could exploit the vulnerability to cause a denial of service DoS by constructing...

TP-Link TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WR940N V4 version, which stems from the parameter ipStart contains a buffer overflow vulnerability. An attacker exploits this vulnerability to cause a denial of service DoS by...

CVE-2023-36359

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...