CVE-2017-13772

Name of the Vulnerable Software and Affected Versions TP-Link WR940N WiFi routers with hardware version 4

Description The issue concerns multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved via the ping addr parameter to "PingIframeRpm.htm" or the dnsserver2 parameter to "WanStaticIpV6CfgRpm.htm".

Recommendations For TP-Link WR940N WiFi routers with hardware version 4, consider disabling access to "PingIframeRpm.htm" and "WanStaticIpV6CfgRpm.htm" until a patch is available. Restrict the use of the ping addr and dnsserver2 parameters in the affected API endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.