CVE-2019-17147

high · 8.8

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Host request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length static buffer. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-8457.

8.8

CVSS

13.7%

EPSS (exploit prob.)

96th

EPSS percentile

2020-01-07

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

Vendor	Product	Affected versions
tp-link	tl-wr841n_firmware	0.9.1_4.16
tp-link	tl-wr841n	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.tp-link.com/us/support/download/tl-wr841n/#Firmware
https://www.zerodayinitiative.com/advisories/ZDI-19-992/
https://www.tp-link.com/us/support/download/tl-wr841n/#Firmware
https://www.zerodayinitiative.com/advisories/ZDI-19-992/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-17147