PT-2022-2226 · Tp Link · Tp-Link Wr-886N

Published 2022-03-09 · Updated 2022-03-18 · CVE-2021-44625

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8

Description A Buffer Overflow issue exists in the /cloud config/cloud device/info interface, allowing a malicious user to execute arbitrary code on the system via a crafted post request. This is caused by a stack-based buffer overflow in the cloud device/info function of the router's firmware. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially formed request.

Recommendations For TP-LINK WR-886N version 20190826 2.3.8, as a temporary workaround, consider disabling access to the /cloud config/cloud device/info interface until a patch is available. Restrict access to this interface to minimize the risk of exploitation. Avoid using this interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2022-02310

CVE-2021-44625

Affected Products

Tp-Link Wr-886N

References · 7

• 🔥❌ https://github.com/Yu3H0/IoT_CVE/tree/main/886N/deviceInfoRegister · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2021-44625 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02310 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-44625 · Security Note
• https://t.me/cvenotify/28162 · Telegram Post
• https://t.me/cibsecurity/38702 · Telegram Post
• https://t.me/cvenotify/28175 · Telegram Post