CVE-2023-46525

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability is hiding in TP-LINK's TL-WR886N router’s login function, and it’s no small matter! ⚡ Think of it like a restaurant where the kitchen keeps accepting orders without checking if they can handle more. Eventually, the order list overflows, causing chaos in food preparation, just like this overflow could crash the router or let attackers take control. This stack overflow could allow attackers to crash the router or execute malicious code, potentially giving them full control over the device. Imagine a sneaky intruder slipping into your home network through a tiny crack, then wreaking havoc on your connected devices!

Put simply

Think of it like a restaurant where the kitchen keeps accepting orders without checking if they can handle more. Eventually, the order list overflows, causing chaos in food preparation, just like this overflow could crash the router or let attackers take control. The vulnerability in TP-LINK TL-WR886N results from improper handling of input in the loginRegister function, leading to a stack overflow. This can be exploited to gain unauthorized access or execute arbitrary code.

What to do

This stack overflow could allow attackers to crash the router or execute malicious code, potentially giving them full control over the device. Imagine a sneaky intruder slipping into your home network through a tiny crack, then wreaking havoc on your connected devices! To protect your network, update the router firmware to the latest version immediately. If you're using version V7.0_3.0.14_Build_221115_Rel.56908n.bin, you need to patch it to close this hole! You've got this! Secure your devices and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister
    cvelistv5