PT-2023-7976 · Tp Link · Tp-Link Tl-Wr902Ac

Nicholas Zubrisky + 1 · Published 2023-07-27 · Updated 2024-09-18 · CVE-2023-50225

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:A/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR902AC (affected versions not specified)

Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR902AC routers. Authentication is required to exploit this issue. The specific flaw exists within the libcmm.so module, resulting from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2023-09060

CVE-2023-50225

ZDI-23-1809

Affected Products

Tp-Link Tl-Wr902Ac

References · 8

• https://osv.dev/vulnerability/CVE-2023-50225 · Vendor Advisory
• https://tp-link.com/ca/support/download/tl-wr902ac/v3/#Firmware · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-1809 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-50225 · Security Note
• https://bdu.fstec.ru/vul/2023-09060 · Security Note
• https://twitter.com/RedPacketSec/status/1737413706571546705 · Twitter Post
• https://twitter.com/CVEnew/status/1786444174822387961 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1737167744347341265 · Twitter Post