CVE-2023-39747 - TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm

Back Back to CVE browser

CRITICAL

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm

Published Aug 21, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 8.68%

Description

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.

Affected products

Vendor TP-Link Product TL-Wr940n Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -
Vendor TP-Link Product TL-Wr941nd Default
n/a
- Version
  v5
  Status
  affected
  Constraints
  -
Vendor TP-Link Product Wr841n V8 Default
n/a
- Version
  8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TP-Link

TL-Wr940n

n/a

Version	Status	Constraints
2.0	affected	-

TP-Link

TL-Wr941nd

n/a

Version	Status	Constraints
v5	affected	-

TP-Link

Wr841n V8

n/a

Version	Status	Constraints
8	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43447
Advisory
https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43447		Advisory
https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md		ExploitThird Party Advisory