CVE-2018-17015

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for ddns phddns username...

CVE-2018-17009

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanhost2g isolate...

CVE-2018-17008

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanhost2g power...

CVE-2018-17010

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanhost2g bandwidth...

CVE-2018-17006

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for firewall lanmanage mac2...

CVE-2018-17014

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for ipmacbind name...

CVE-2018-17005

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for firewall dmz enable...

CVE-2018-17015

TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0) are affected. Authenticated attackers can cause denial of service by sending long JSON data to ddns phddns username, crashing router services such as inetd, HTTP, DNS, and UPnP. Root cause: malformed/overlong JSON data triggering resour...

CVE-2018-17009

Affected devices: TP-Link TL-WR886N (versions 6.0 2.3.4 and 7.0 1.1.0). Vulnerability: authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the wireless wlan_host_2g isolate. Root cause/impact: abnormal/overlong JSON payload leads to denial of se...

CVE-2018-17018

CVE-2018-17018 affects TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). Authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data for the time_switch name. The impact described is partial availability loss of those services. The available so...

CVE-2018-17011

The CVE-2018-17011 entry concerns TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The vulnerability allows authenticated attackers to crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data for the hosts_info parameter sun. The underlying issue is triggered by exces...

CVE-2018-17012

The CVE-2018-17012 issue affects TP-Link TL-WR886N devices (firmware versions 6.0 2.3.4 and 7.0 1.1.0). The root cause involves processing of long JSON data for hosts_info set_block_flag up_limit, which can cause authenticated attackers to crash router services such as inetd, HTTP, DNS, and UPnP....

CVE-2018-17018

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for timeswitch name...

CVE-2018-17017

CVE-2018-17017 affects TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The issue allows authenticated attackers to crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data for the dhcpd/udhcpd enable feature. Impact is partial availability loss per CVSS v3.0 metrics ...

CVE-2018-17013

TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0) are affected by a Denial of Service flaw where authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the protocol wan wan_rate. The issue arises in the handling of the wan_rate field, ac...

CVE-2018-17007

CVE-2018-17007 affects TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). Authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending unusually long JSON data to the wireless wlan_wds_2g SSID. CVSS data from NVD indicates Network attack, Low complexity, Privil...

CVE-2018-17007

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanwds2g ssid...

CVE-2018-17004

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wlanaccess name...

CVE-2018-17012

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for hostsinfo setblockflag uplimit...

CVE-2018-17004

CVE-2018-17004 affects TP-Link TL-WR886N devices, specifically version 6.0 2.3.4 and 7.0 1.1.0. The issue allows authenticated attackers to crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data for the wlan_access name. This can impact availability of router services (as indica...