CVEvulnerability

CVE-2023-36356

7.7 HIGH Published 2023-06-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-125

Description

TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Affected configurations

• tp-link tl-wr940n firmware • tp-link tl-wr841n firmware • tp-link tl-wr740n firmware • tp-link tl-wr941nd firmware

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References