CVE-2022-25074

TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr()

published February 22, 2022

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow in TP-Link routers could let attackers execute arbitrary code without breaking a sweat! 🔥 Think of this like a restaurant kitchen that mixes up its ingredients—one wrong ingredient can lead to an explosive dish! In this case, an attacker could send a specially crafted request that causes the router’s memory to overflow, allowing them to take control. This could be absolutely devastating! An attacker could potentially hijack the router, redirect traffic, or even launch further attacks on other devices connected to your network. It’s like leaving the door wide open for intruders at a restaurant—you never know what they might cook up!

Put simply

Think of this like a restaurant kitchen that mixes up its ingredients—one wrong ingredient can lead to an explosive dish! In this case, an attacker could send a specially crafted request that causes the router’s memory to overflow, allowing them to take control. The stack overflow in the DM_Fillobjbystr() function allows unauthenticated users to send data that exceeds the buffer size, leading to unauthorized code execution on the router.

What to do

This could be absolutely devastating! An attacker could potentially hijack the router, redirect traffic, or even launch further attacks on other devices connected to your network. It’s like leaving the door wide open for intruders at a restaurant—you never know what they might cook up! To safeguard your network, immediately update the firmware on your TP-Link TL-WR902AC to the latest version available. Review your network access controls and consider changing default credentials to prevent unauthorized access. 🛡️ You've got this! By following these steps, you’ll clamp down on this vulnerability and keep your network safe. 💪😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13034 · 96.3th percentile
Published
2022-02-22T22:44Z
EPSS history
Timeline
  • 22 FEB 22:44Z
    TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr()
    cvelistv5