Paper/Archive/CVE-2023-36355

CVE-2023-36355

tp-link tl-wr940n_v4 — TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm.

EPSS 32%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (NVD)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 98.3.983 × 2019.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

tl-wr940n_v44–CISA-ADP

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/a101e-IoTvul/iotvul/blob/main/tp-link/9/TP-Link%20TL-WR940N%20wireless%20router%20userRpmWanDynamicIpV6CfgRpm%20buffer%20write%20out-of-bounds%20vulnerability.md refpacketstormsecurity.com/files/173294/TP-Link-TL-WR940N-4-Buffer-Overflow.html