CVE-2018-17010: Medium severity tp-link tl-wr886n vulnerability

Published Sep 13, 2018

Updated

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlanhost2g bandwidth.

Affected Software

3 affected components

TP-Link Tl-wr886n Firmware=6.0_2.3.4

TP-Link Tl-wr886n Firmware=7.0_1.1.0

TP-Link TL-WR886N

Event History

Sep 13, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is CVE-2018-17010?

CVE-2018-17010 is a vulnerability discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices that allows authenticated attackers to crash router services via long JSON data for wireless wlan_host_2g bandwidth.

How does CVE-2018-17010 affect TP-Link TL-WR886N routers?

CVE-2018-17010 affects TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices by allowing authenticated attackers to crash router services.

How severe is CVE-2018-17010?

CVE-2018-17010 has a severity rating of 6.5 (medium).

How can I fix CVE-2018-17010?

To fix CVE-2018-17010, TP-Link TL-WR886N users should update their firmware to a version that includes a patch for this vulnerability.

Where can I find more information about CVE-2018-17010?

You can find more information about CVE-2018-17010 on the GitHub repository of PAGalaxyLab, which includes a README file detailing the vulnerability.