CVE-2020-10881: (Pwn2Own) TP-Link Archer A7 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the root user.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9660.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-10881?
CVE-2020-10881 is a vulnerability that allows remote attackers to execute arbitrary code on TP-Link Archer A7 routers.
Is authentication required to exploit CVE-2020-10881?
No, authentication is not required to exploit this vulnerability.
What is the severity of CVE-2020-10881?
CVE-2020-10881 has a severity rating of critical with a score of 9.8.
How does CVE-2020-10881 affect TP-Link Archer A7 routers?
CVE-2020-10881 allows remote attackers to execute arbitrary code on TP-Link Archer A7 routers.
How can I fix CVE-2020-10881 vulnerability?
Apply the latest firmware update provided by TP-Link to mitigate the CVE-2020-10881 vulnerability.