PT-2023-4516 · Tp Link · Tp-Link Tl-Wr841N+2

Published 2023-08-07 · Updated 2023-08-25 · CVE-2023-39745

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR940N version V2 TP-Link TL-WR941ND version V5 TP-Link TL-WR841N version V8

Description The issue is related to a buffer overflow in the /userRpm/AccessCtrlAccessRulesRpm component of TP-Link routers. This allows attackers to cause a Denial of Service (DoS) via a crafted GET request to the "/userRpm/AccessCtrlAccessRulesRpm" endpoint. The GET request can be exploited by a remote attacker to disrupt service.

Recommendations For TP-Link TL-WR940N version V2, consider disabling access to the /userRpm/AccessCtrlAccessRulesRpm component until a patch is available. For TP-Link TL-WR941ND version V5, restrict access to the /userRpm/AccessCtrlAccessRulesRpm component to minimize the risk of exploitation. For TP-Link TL-WR841N version V8, avoid using the /userRpm/AccessCtrlAccessRulesRpm component in production environments until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2023-04919

CVE-2023-39745

Affected Products

Tp-Link Tl-Wr841N

Tp-Link Tl-Wr940N

Tp-Link Tl-Wr941Nd

References · 4

• 🔥 https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md · Exploit
• https://bdu.fstec.ru/vul/2023-04919 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-39745 · Security Note
• https://t.me/cvenotify/57282 · Telegram Post