PT-2022-17068
CVE-2022-25073
·
Published
2022-02-22
·
Updated
2022-03-03
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TP-Link TL-WR841N router version 0.9.1 4.18
Description
A stack overflow was discovered in the
dm fillObjByStr() function, allowing unauthenticated attackers to execute arbitrary code.Recommendations
For TP-Link TL-WR841N router version 0.9.1 4.18, as a temporary workaround, consider disabling the
dm fillObjByStr() function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾