CVE-2022-25074

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR902AC(US) V3 191209 routers

Description The issue is related to a stack overflow in the DM Fillobjbystr() function, which allows unauthenticated attackers to execute arbitrary code. This is due to a buffer overflow when recording data in memory, enabling an attacker to perform unauthorized actions.

Recommendations For TP-Link TL-WR902AC(US) V3 191209 routers, as a temporary workaround, consider disabling the DM Fillobjbystr() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.