CVE-2023-39747: Buffer Overflow
TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-39747?
CVE-2023-39747 is a vulnerability found in TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 routers, which allows for a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
What is the severity of CVE-2023-39747?
The severity of CVE-2023-39747 is rated as critical with a CVSS severity score of 9.8.
How can the CVE-2023-39747 vulnerability be exploited?
CVE-2023-39747 can be exploited by sending a specially crafted request to the affected routers, causing a buffer overflow and potentially allowing an attacker to execute arbitrary code.
Which TP-Link router models are affected by CVE-2023-39747?
TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 routers are affected by CVE-2023-39747.
Is there a fix for CVE-2023-39747?
At the moment, there is no official fix or patch available for CVE-2023-39747. It is recommended to monitor the vendor's website for any updates or mitigation measures.