Buffer overflow in TP-Link Tl-Wr841n
CVE-2019-17147
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Host request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length static buffer. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-8457.
Vulnerability class: Buffer Overflow
EPSS: 0.137 (96.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Tp-link Tl-wr841n — versions 0.9.1 4.16 v007c.0 Build 180613 Rel.42415n
- Tp-link Tl-wr841n_firmware — versions 0.9.1_4.16
Weakness classification (CWE)
Public proof-of-concept exploits
References
- zdi-disclosures@trendmicro.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
- zdi-disclosures@trendmicro.com (Product, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-17147?
- CVE-2019-17147 is a high-severity vulnerability in TP-Link Tl-Wr841n, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.8/10. Published 2020-01-07.
- How severe is CVE-2019-17147?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2019-17147 known to be exploited?
- 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.