PT-2018-11336 · Tp Link · Tp-Link Tl-Wa850Re

Published 2018-04-25 · Updated 2020-08-24 · CVE-2018-12693

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TP-Link TL-WA850RE Wi-Fi Range Extender version 5

Description The issue is a stack-based buffer overflow that can be triggered by remote authenticated users, causing a denial of service. This occurs when a long type parameter is sent to the "/data/syslog.filter.json" API endpoint.

Recommendations For TP-Link TL-WA850RE Wi-Fi Range Extender version 5, as a temporary workaround, consider restricting access to the "/data/syslog.filter.json" API endpoint to minimize the risk of exploitation. Avoid using long type parameters in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-02473

CVE-2018-12693

Affected Products

Tp-Link Tl-Wa850Re

References · 5

• 🔥 https://medium.com/advisability/the-in-security-of-the-tp-link-technologies-tl-wa850re-wi-fi-range-extender-26db87a7a0cc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12693 · Security Note
• https://bdu.fstec.ru/vul/2025-02473 · Security Note
• https://exploit-db.com/exploits/44550 · Note
• https://clouddefense.ai/cve/2018/CVE-2018-12693 · Note