CVE-2023-46537

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow is hiding in the TP-LINK TL-WR886N router! This vulnerability in getRegVeriRegister could open the door to some serious mischief. 🔐 Think of it like a waiter who keeps bringing too many plates to a customer who only ordered one. Eventually, the table collapses under the weight and everything goes crashing down! An attacker could exploit this stack overflow to execute arbitrary code, potentially allowing them to take control of the router. This could lead to unauthorized access to your network, compromising sensitive information and allowing for malicious activities that could affect your entire connected ecosystem.

Put simply

Think of it like a waiter who keeps bringing too many plates to a customer who only ordered one. Eventually, the table collapses under the weight and everything goes crashing down! This vulnerability arises from an unchecked buffer in the getRegVeriRegister function, which can be triggered by sending specially crafted requests that overflow the stack.

What to do

An attacker could exploit this stack overflow to execute arbitrary code, potentially allowing them to take control of the router. This could lead to unauthorized access to your network, compromising sensitive information and allowing for malicious activities that could affect your entire connected ecosystem. To protect your network, immediately update the router firmware to the latest version that addresses this vulnerability. Regularly check for firmware updates and consider changing default settings to strengthen your defenses. You've got this! By following these steps, you’ll be well on your way to securing your network and earning your security hero badge! 🦸‍♂️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister
    cvelistv5