PT-2019-3733
CVE-2019-6989
·
تاريخ النشر
2019-06-06
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TP-Link TL-WR940N version not specified
TP-Link TL-WR941ND version not specified
Description
The issue is caused by a stack-based buffer overflow due to improper bounds checking by the
ipAddrDispose function. This can be exploited by sending specially crafted ICMP echo request packets, allowing a remote authenticated attacker to overflow a buffer and execute arbitrary code on the system with elevated privileges.Recommendations
For TP-Link TL-WR940N, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For TP-Link TL-WR941ND, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾