CVE-2023-36358

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Score

CVSS 3.1 7.7 High

Status

Modified - cve@mitre.org

Published

2023-06-22

Last modified

2024-12-10

Weaknesses

CWE-120

Affected products

• Tl-wr743nd Firmware (Tp-link)
• Tl-wr841n Firmware (Tp-link)
• Tl-wr940n Firmware (Tp-link)
• Tl-wr941nd Firmware (Tp-link)

References

• https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTar…