CVE-2018-17005

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall dmz enable.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-09-13

Last modified

2024-09-16

Affected products

• Tl-wr886n Firmware (Tp-link)

References

• https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_01/README.md