PT-2018-3322 · Tp Link · Tp-Link Tl-R600Vpn

Published 2018-11-19 · Updated 2023-02-03 · CVE-2018-3950

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TP-Link TL-R600VPN versions HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3

Description A remote code execution issue exists in the ping and tracert functionality of the TP-Link TL-R600VPN http server. This is caused by a stack overflow resulting from a specially crafted IP address. An attacker can trigger this issue by sending a single authenticated HTTP request, potentially allowing remote code execution.

Recommendations For TP-Link TL-R600VPN version HWv3 FRNv1.3.0, consider disabling the ping and tracert functionality until a patch is available. For TP-Link TL-R600VPN version HWv2 FRNv1.2.3, restrict access to the http server to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2019-04740

CVE-2018-3950

Affected Products

Tp-Link Tl-R600Vpn

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0619 · Exploit
• https://bdu.fstec.ru/vul/2019-04740 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3950 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3950 · Security Note
• https://securitylab.ru/news/496578.php · Note
• https://tp-link.com/us/support/download/tl-r600vpn · Note
• https://cve.circl.lu/cve/CVE-2018-3950 · Note