CVE-2023-46535

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getResetVeriRegister

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow lurks in the TP-LINK TL-WR886N firmware! Just one user-triggered action can send it tumbling into chaos. 🔥 Think of it like a crowded restaurant where one customer keeps ordering the same dish, eventually causing the kitchen to overflow with tickets. That’s how this stack overflow can overwhelm the device! An attacker could exploit this vulnerability to crash the router, potentially rendering your entire network inoperable. This could lead to loss of connectivity and disrupt all your online activities, leaving your smart home devices in the dark and your streaming marathons cut short!

Put simply

Think of it like a crowded restaurant where one customer keeps ordering the same dish, eventually causing the kitchen to overflow with tickets. That’s how this stack overflow can overwhelm the device! This stack overflow vulnerability exists in the getResetVeriRegister function, allowing attackers to manipulate the stack by sending crafted input, which could lead to arbitrary code execution or a crash.

What to do

An attacker could exploit this vulnerability to crash the router, potentially rendering your entire network inoperable. This could lead to loss of connectivity and disrupt all your online activities, leaving your smart home devices in the dark and your streaming marathons cut short! Immediately patch the firmware to the latest version available. Review your network security settings and consider disabling remote management features until the patch is applied. Regularly monitor for any suspicious activities. 🛡️ You've got this! Follow these steps, and you’ll be back to smooth sailing on your network in no time! ✨

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getResetVeriRegister
    cvelistv5