CVE-2023-46371

2023-10-2518:17:37

CWE-787

[email protected]

web.nvd.nist.gov

tp-link

tl-wdr7660

stack overflow

vulnerability

function upgradeinfojsontobin

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

22.1%

JSON

TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin.

Affected configurations

Nvd

Node

tp-linktl-wdr7660_firmwareMatch2.0.30

AND

tp-linktl-wdr7660Match-

VendorProductVersionCPE
tp-linktl-wdr7660_firmware2.0.30cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:*:*:*:*:*:*:*
tp-linktl-wdr7660-cpe:2.3:h:tp-link:tl-wdr7660:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	tl-wdr7660_firmware	2.0.30	cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:::::::*
tp-link	tl-wdr7660	-	cpe:2.3:h:tp-link:tl-wdr7660:-:::::::*