PT-2018-11336

CVE-2018-12693

·

Publicado

2018-04-25

·

Atualizado

2020-08-24

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions TP-Link TL-WA850RE Wi-Fi Range Extender version 5
Description The issue is a stack-based buffer overflow that can be triggered by remote authenticated users, causing a denial of service. This occurs when a long type parameter is sent to the "/data/syslog.filter.json" API endpoint.
Recommendations For TP-Link TL-WA850RE Wi-Fi Range Extender version 5, as a temporary workaround, consider restricting access to the "/data/syslog.filter.json" API endpoint to minimize the risk of exploitation. Avoid using long type parameters in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾