CVE-2023-39747

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at…

published August 21, 2023

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow lurks in TP-Link routers! The vulnerability is triggered through the radiusSecret parameter at /userRpm/WlanSecurityRpm, potentially opening the door to some serious mischief. 🔥 Think of it as a tightly packed suitcase during a road trip. If you try to stuff in one more item (like an oversized sweater), it might burst open, causing everything inside to spill out. This buffer overflow does just that—overflowing data can lead to unexpected behaviors and vulnerabilities. If exploited, this could allow an attacker to manipulate memory, potentially executing arbitrary code. While the severity is currently unknown, the implications of such access could lead to unauthorized control or data leakage, making it a security concern worth addressing!

Put simply

Think of it as a tightly packed suitcase during a road trip. If you try to stuff in one more item (like an oversized sweater), it might burst open, causing everything inside to spill out. This buffer overflow does just that—overflowing data can lead to unexpected behaviors and vulnerabilities. This vulnerability arises from improper handling of the radiusSecret parameter, which allows for a buffer overflow. When the input exceeds the allocated buffer size, it can corrupt adjacent memory, leading to unpredictable behavior or system compromise.

What to do

If exploited, this could allow an attacker to manipulate memory, potentially executing arbitrary code. While the severity is currently unknown, the implications of such access could lead to unauthorized control or data leakage, making it a security concern worth addressing! To safeguard your TP-Link devices, ensure they are running the latest firmware version provided by the manufacturer. Regularly check for updates and consider disabling unnecessary services that could expose this vulnerability. You've got this! Keeping your devices updated is a simple yet powerful way to bolster your security. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08680 · 95.1th percentile
Published
2023-08-21T00:00Z
EPSS history
Timeline
  • 21 AUG 00:00Z
    TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at…
    cvelistv5