Lucene search
PRIOn knowledge basePRION:CVE-2022-42433HistoryMar 29, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-03-2919:15:00
PRIOn knowledge base
www.prio-n.com
1
network-adjacent attackers
arbitrary code execution
tp-link
authentication bypass
ated_tp service
system call validation
root context
zdi-can-17356
nvd
0.0005 Low
EPSS
Percentile
18.0%
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)_V14_220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17356.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tl-wr841_firmware | lt | 220914 |
Related
cve
cve
CVE-2022-42433
2023-03-29 19:15:17
nvd
nvd
CVE-2022-42433
2023-03-29 19:15:17
cvelist
cvelist
CVE-2022-42433
2023-03-29 00:00:00
zdi
zdi