PT-2019-3094 · Tp Link · Tp-Link Archer C2+1
Published
2019-08-27
·
Updated
2020-08-24
·
CVE-2019-13267
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
TP-Link Archer C3200 version 1
TP-Link Archer C2 version 1
Description
The issue is related to insufficient compartmentalization between a host network and a guest network established by the same device. An attacker can exploit this by joining and then leaving an IGMP group, causing the router to create an IGMP Membership Query packet with the Group IP and send it to both the host and guest networks. The data is transferred within the Group IP field, which is completely controlled by the sender. This vulnerability exists due to insufficient input validation in the router's firmware, allowing a remote attacker to bypass the separation between the host and guest networks using the IGMP protocol.
Recommendations
For TP-Link Archer C3200 version 1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For TP-Link Archer C2 version 1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tp-Link Archer C2
Tp-Link Archer C3200