CVE-2018-16119: Buffer Overflow
First published: Thu Jun 20 2019(Updated: )
Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Tl-wr1043nd Firmware | =3.00 | |
| TP-LINK TL-WR1043ND |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-16119.
What is the severity of CVE-2018-16119?
CVE-2018-16119 has a severity level of 7.2 (critical).
What is the affected software for CVE-2018-16119?
The affected software for CVE-2018-16119 is TP-Link WR1043nd (Firmware Version 3).
How can remote attackers exploit CVE-2018-16119?
Remote attackers can exploit CVE-2018-16119 by sending a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm on the TP-Link WR1043nd (Firmware Version 3) httpd server.
Are there any references available for CVE-2018-16119?
Yes, you can find references for CVE-2018-16119 at the following URLs: http://tp-link.com/ and https://www.secsignal.org/news/exploiting-routers-just-another-tp-link-0day.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/event
- agent/type
- agent/tags
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/tp-link
- canonical/tp-link tl-wr1043nd firmware
- version/tp-link tl-wr1043nd firmware/3.00
- canonical/tp-link tl-wr1043nd