CVE-2022-25073

TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthenticated attackers to execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-02-24

Last modified

2024-08-03

Weaknesses

CWE-787

Affected products

• Tl-wr841n Firmware (Tp-link)

References

• https://github.com/EPhaha/IOT_vuln/tree/main/TP-Link/TL-WR841N