PT-2023-6591 · Tp Link · Tp-Link Tl-Wr886N
CVE-2023-46536
·
Publicado
2023-10-23
·
Atualizado
2024-09-11
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin
Description
The issue is related to a stack overflow in the
chkRegVeriRegister() function, which can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of protected information. This is a result of the function allowing an operation to exceed the buffer boundaries in memory.Recommendations
For TP-LINK TL-WR886N version 7.0 3.0.14 Build 221115 Rel.56908n.bin, consider disabling the
chkRegVeriRegister() function as a temporary workaround until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Stack Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Tp-Link Tl-Wr886N