CWE
787 119
Advisory Published
Updated

CVE-2019-13614: Buffer Overflow

First published: Wed Jul 17 2019(Updated: )

CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
TP-Link Archer C1200 firmware=1.0.0-170413
TP-Link Archer C1200 firmware=1.0.0-180103
TP-Link Archer C1200 firmware=1.0.0-180123
TP-Link Archer C1200 firmware=1.0.0-20180502
TP-Link Archer C1200

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2019-13614?

    CVE-2019-13614 is a vulnerability in the TP-Link Archer C1200 router firmware that allows a remote attacker to achieve code execution or denial of service.

  • How severe is CVE-2019-13614?

    CVE-2019-13614 has a severity rating of 9.8 (Critical).

  • Which TP-Link Archer C1200 firmware versions are affected by CVE-2019-13614?

    TP-Link Archer C1200 firmware versions 1.0.0 Build 20180502 rel.45702 and earlier are affected by CVE-2019-13614.

  • How can a remote attacker exploit CVE-2019-13614?

    A remote attacker can exploit CVE-2019-13614 by sending a specially crafted payload to the TP-Link device, triggering a stack-based buffer overflow.

  • Is TP-Link Archer C1200 vulnerable to CVE-2019-13614?

    No, TP-Link Archer C1200 is not vulnerable to CVE-2019-13614.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203