CVE-2020-8423
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2020-04-02
- Last modified
- 2024-08-04
- Weaknesses
- CWE-120
Affected products
References
- https://ktln2.org/2020/03/29/exploiting-mips-router/
- https://www.tp-link.com/us/security
