CVE-2023-46522

TP-LINK device TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 were discovered to contain a stack overflow via the function…

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

⚡ A stack overflow in TP-LINK devices could let attackers crash the system or execute code — imagine your router throwing a tantrum! 🔥 Think of it like a busy restaurant kitchen that overfills a pot of soup, causing a spill that disrupts everything. When the overflow happens in the device, it could lead to a messy situation where an attacker takes control. An attacker could exploit this vulnerability to crash the device or, worse, execute arbitrary code. This could lead to unauthorized access to your home network, putting your personal data and devices at risk. Protecting your smart home just got a little more urgent!

Put simply

Think of it like a busy restaurant kitchen that overfills a pot of soup, causing a spill that disrupts everything. When the overflow happens in the device, it could lead to a messy situation where an attacker takes control. This vulnerability in TP-LINK devices TL-WR886N and TL-WDR7660 occurs due to a stack overflow in the deviceInfoRegister function, allowing for potential code execution or denial of service.

What to do

An attacker could exploit this vulnerability to crash the device or, worse, execute arbitrary code. This could lead to unauthorized access to your home network, putting your personal data and devices at risk. Protecting your smart home just got a little more urgent! To protect your devices, update to the latest firmware version provided by TP-LINK. Regularly check for updates and consider enabling any available security features to add extra layers of protection. Don't forget to restart your router after updates! You've got this! With these steps, you can secure your network and regain peace of mind. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01265 · 69.5th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TP-LINK device TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 were discovered to contain a stack overflow via the function…
    cvelistv5