CVE-2023-36359

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

0.81%

Published

Jun 22, 2023

Modified

Dec 10, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-120CWE-120

Affected Products (14)

tp-link · tl-wr940n_firmwarevulnerable

tp-link · tl-wr940n

tp-link · tl-wr841n_firmwarevulnerable

tp-link · tl-wr841n

tp-link · tl-wr841n_firmwarevulnerable

tp-link · tl-wr841n

tp-link · tl-wr940n_firmwarevulnerable

tp-link · tl-wr940n

tp-link · tl-wr940n_firmwarevulnerable

tp-link · tl-wr940n

tp-link · tl-wr941nd_firmwarevulnerable

tp-link · tl-wr941nd

tp-link · tl-wr941nd_firmwarevulnerable

tp-link · tl-wr941nd

References (3)

https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md

ExploitThird Party Advisory

https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md

ExploitThird Party Advisory

https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs