PT-2019-13448

CVE-2019-13613

·

Publicado

2019-07-17

·

Atualizado

2020-08-24

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 (EU) and earlier
Description The issue is related to a stack-based buffer overflow in the CMD FTEST CONFIG of the TP-Link Device Debug protocol. This allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.
Recommendations For TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 (EU) and earlier, consider disabling the CMD FTEST CONFIG in the TP-Link Device Debug protocol until a patch is available to prevent potential code execution or denial of service attacks.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾