Buffer overflow in Tp-link Tl-wr802n
CVE-2021-29302
TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the net…
Vulnerability class: Buffer Overflow
EPSS: 0.059 (92.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Tp-link Tl-wr802n — versions v4
- Tp-link Tl-wr802n_firmware
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-29302?
- CVE-2021-29302 is a high-severity vulnerability in Tp-link Tl-wr802n, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.1/10. Published 2021-04-12.
- How severe is CVE-2021-29302?
- High severity. CVSS v3 base score is 8.1 out of 10.
- Is CVE-2021-29302 known to be exploited?
- 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.