CVE-2022-33087: High severity tp-link archer a5 firmware vulnerability

Published Jun 30, 2022

Updated

A stack overflow in the function DM In fillobjbystr() of TP-Link Archer C50&A5(US)V5200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Affected Software

4 affected components

TP-Link Archer A5 Firmware=c50\&a5\(us\)_v5_200407

TP-Link Archer A5=5

TP-Link Archer C50 Firmware=c50\&a5\(us\)_v5_200407

TP-Link Archer C50=5

Event History

Jun 30, 2022

CVE Published

via MITRE·10:27 PM

Data Sourced

via MITRE·10:27 PM

Description

Frequently Asked Questions

What is CVE-2022-33087?

CVE-2022-33087 is a vulnerability in the TP-Link Archer C50&A5(US)_V5_200407 firmware that allows attackers to cause a Denial of Service (DoS) through a stack overflow in the DM_ In fillobjbystr() function via a crafted HTTP request.

How severe is CVE-2022-33087?

CVE-2022-33087 has a severity rating of 7.5 (high).

Which software versions are affected by CVE-2022-33087?

The TP-Link Archer A5 firmware version c50&a5(us)_v5_200407 is affected by CVE-2022-33087.

How can CVE-2022-33087 be exploited?

CVE-2022-33087 can be exploited by sending a crafted HTTP request to the affected TP-Link Archer C50&A5(US)_V5_200407 firmware, triggering a stack overflow in the DM_ In fillobjbystr() function and causing a Denial of Service (DoS) condition.

Is TP-Link Archer C50 firmware affected by CVE-2022-33087?

Yes, the TP-Link Archer C50 firmware version c50&a5(us)_v5_200407 is affected by CVE-2022-33087.