CVE-2018-17017

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for dhcpd udhcpd enable.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-09-13

Last modified

2024-09-17

Affected products

• Tl-wr886n Firmware (Tp-link)

References

• https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_13/README.md