Vulnerability in TP-Link Tl-Wr740n

CVE-2014-9350

TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service (httpd crash) via vectors involving a "new" value in the isNew parameter to PingIframeRpm.htm.

EPSS: 0.072 (93.8th percentile) — read the EPSS interpretation.

Affected products

Tp-link Tl-wr740n — versions 4
Tp-link Tl-wr740n_firmware — versions 3.16.4, 3.16.6, 3.17.0
N/a — versions n/a

Weakness classification (CWE)

CWE-19

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)