CVE-2017-8219

Name of the Vulnerable Software and Affected Versions TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n

Description The issue allows for a denial-of-service (DoS) attack against the HTTP server by sending a crafted Cookie header to the "/cgi/ansi" API endpoint.

Recommendations For TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n, consider restricting access to the /cgi/ansi URI as a temporary workaround until a patch is available. Avoid using crafted Cookie headers in the affected API endpoint until the issue is resolved.