CVE-2024-54887: Buffer Overflow
TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54887?
CVE-2024-54887 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2024-54887?
To fix CVE-2024-54887, update the firmware of TP-Link TL-WR940N and TL-WR940N V4 devices to the latest version beyond 3.16.9.
What systems are affected by CVE-2024-54887?
CVE-2024-54887 affects TP-Link TL-WR940N V3 and V4 routers with firmware version 3.16.9 and earlier.
What attack vector is used in CVE-2024-54887?
CVE-2024-54887 can be exploited via a buffer overflow through the dnsserver1 and dnsserver2 parameters at the specified URL.
Who can exploit CVE-2024-54887?
An authenticated attacker can exploit CVE-2024-54887 to execute arbitrary code on the vulnerable device.