CVE-2018-16119

Name of the Vulnerable Software and Affected Versions TP-Link WR1043nd version 3

Description The issue is a stack-based buffer overflow in the httpd server, allowing remote attackers to execute arbitrary code via a malicious MediaServer request to "/userRpm/MediaServerFoldersCfgRpm.htm".

Recommendations For TP-Link WR1043nd version 3, consider disabling access to the "/userRpm/MediaServerFoldersCfgRpm.htm" endpoint until a patch is available. Restrict access to the MediaServer functionality to minimize the risk of exploitation.