CVE-2018-17012: Medium severity tp-link tl-wr886n vulnerability

Published Sep 13, 2018

Updated

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for hostsinfo setblockflag uplimit.

Affected Software

3 affected components

TP-Link Tl-wr886n Firmware=6.0_2.3.4

TP-Link Tl-wr886n Firmware=7.0_1.1.0

TP-Link TL-WR886N

Event History

Sep 13, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-17012?

The severity of CVE-2018-17012 is medium (6.5).

How does CVE-2018-17012 affect TP-Link TL-WR886N devices?

Authenticated attackers can crash router services on TP-Link TL-WR886N devices via a long JSON data payload.

Which versions of TP-Link TL-WR886N are affected by CVE-2018-17012?

TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices are affected.

How can authenticated attackers exploit CVE-2018-17012?

Authenticated attackers can crash router services such as inetd, HTTP, DNS, and UPnP by sending long JSON data for the hosts_info set_block_flag up_limit.

Is TP-Link TL-WR886N version 6.0_2.3.4 vulnerable to CVE-2018-17012?

Yes, TP-Link TL-WR886N version 6.0_2.3.4 is vulnerable to CVE-2018-17012.

Is TP-Link TL-WR886N version 7.0_1.1.0 vulnerable to CVE-2018-17012?

Yes, TP-Link TL-WR886N version 7.0_1.1.0 is vulnerable to CVE-2018-17012.

How can I fix the vulnerability in TP-Link TL-WR886N devices?

There is currently no known fix for this vulnerability. It is recommended to monitor for vendor updates or patches.

Where can I find more information about CVE-2018-17012?

More information about CVE-2018-17012 can be found at the following reference: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_08/README.md