PT-2019-9223
CVE-2018-16119
·
تاريخ النشر
2019-06-20
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TP-Link WR1043nd version 3
Description
The issue is a stack-based buffer overflow in the httpd server, allowing remote attackers to execute arbitrary code via a malicious MediaServer request to "/userRpm/MediaServerFoldersCfgRpm.htm".
Recommendations
For TP-Link WR1043nd version 3, consider disabling access to the "/userRpm/MediaServerFoldersCfgRpm.htm" endpoint until a patch is available. Restrict access to the MediaServer functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾