CVE-2020-8423: Buffer Overflow

Published Apr 2, 2020

Updated

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.

Affected Software

4 affected components

TP-Link TL-WR841N firmware=3.16.9

TP-Link TL-WR841N=v10

All of the following

TP-Link TL-WR841N firmware=3.16.9

TP-Link TL-WR841N=v10

Event History

Apr 2, 2020

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Sep 14, 58461

Event

06:21 PM

Frequently Asked Questions

What is CVE-2020-8423?

CVE-2020-8423 is a buffer overflow vulnerability in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices.

How does CVE-2020-8423 affect TP-Link TL-WR841N V10 devices?

CVE-2020-8423 allows an authenticated remote attacker to execute arbitrary code by sending a GET request to the Wi-Fi network configuration page.

What is the severity of CVE-2020-8423?

The severity of CVE-2020-8423 is critical with a CVSS score of 7.2.

How can I fix CVE-2020-8423 on my TP-Link TL-WR841N V10 device?

To fix CVE-2020-8423, it is recommended to update the firmware of TP-Link TL-WR841N V10 to a version that addresses the vulnerability.

Where can I find more information about CVE-2020-8423?

You can find more information about CVE-2020-8423 on the KTln2.org and TP-Link security websites.