CVE-2018-16119

Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2019-06-20

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Tl-wr1043nd Firmware (Tp-link)

References

• http://tp-link.com/
• https://www.secsignal.org/news/exploiting-routers-just-another-tp-link-0day