CVE-2023-36354

HIGH
7.5CVSS v3
CVSS v2
0.13% EPSS (exploit probability)
CWE-120CWE

Description

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected routers (1)

VendorModelMatched viaAffected versionsFixed inPatch?
TP-Link TP-Link TL-WR841N No

External references