CVE-2020-8423

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
tp-linktl-wr841n_firmware
3.16.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://ktln2.org/2020/03/29/exploiting-mips-router/
https://www.tp-link.com/us/security
https://ktln2.org/2020/03/29/exploiting-mips-router/
https://www.tp-link.com/us/security