CRITICAL
Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N
Published Nov 20, 2020
9.8
CRITICALCVSS 3.1
EPSS 1.20%
Description
Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.
Affected products
No data.
Configuration 1
AND
- n/a
Configuration 2
AND
- n/a
Configuration 3
AND
- n/a
Configuration 4
AND
- n/a
Configuration 5
AND
- n/a
Configuration 6
AND
- n/a
Configuration 7
AND
- n/a
Configuration 8
AND
- n/a
Configuration 9
AND
- n/a
Configuration 10
AND
- n/a
Configuration 11
AND
- n/a
Configuration 12
AND
- n/a
Configuration 13
AND
- n/a
Configuration 14
AND
- n/a
Configuration 15
AND
- n/a
Configuration 16
AND
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21268 Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192112 Third Party Advisory
- https://github.com/peanuts62/TP-Link-poc x_refsource_MISCBroken Link
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21268 | Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/192112 | Third Party Advisory | |
| https://github.com/peanuts62/TP-Link-poc | x_refsource_MISCBroken Link |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 20, 2020
Updated Aug 4, 2024
Reserved Nov 16, 2020
Link CVE-2020-28877
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-21268 Assigner mitre
Published Nov 20, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-21268