CVE-2019-6989: Buffer Overflow
TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6989?
CVE-2019-6989 is a vulnerability in the TP-Link TL-WR940N router that allows a remote attacker to execute arbitrary code on the system.
How does the CVE-2019-6989 vulnerability occur?
The vulnerability occurs due to improper bounds checking in the ipAddrDispose function of the TP-Link TL-WR940N router.
What is the severity of CVE-2019-6989?
The severity of CVE-2019-6989 is critical, with a CVSS score of 8.8.
Which TP-Link routers are affected by the CVE-2019-6989 vulnerability?
TP-Link TL-WR940N routers are affected by the CVE-2019-6989 vulnerability.
How can I fix the CVE-2019-6989 vulnerability?
To fix the CVE-2019-6989 vulnerability, it is recommended to update the firmware of the TP-Link TL-WR940N router to the latest version provided by TP-Link.