CVE-2024-9284: TP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow
A vulnerability was found in TP-LINK TL-WR841ND up to 20240920. It has been rated as critical. Affected by this issue is some unknown functionality of the file /userRpm/popupSiteSurveyRpm.htm. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9284?
CVE-2024-9284 has been rated as critical.
How do I fix CVE-2024-9284?
To fix CVE-2024-9284, update the TP-LINK TL-WR841ND firmware to the latest version after September 20, 2024.
What does CVE-2024-9284 exploit?
CVE-2024-9284 exploits a stack-based buffer overflow vulnerability through the argument ssid in the file /userRpm/popupSiteSurveyRpm.htm.
Which devices are affected by CVE-2024-9284?
CVE-2024-9284 affects the TP-LINK TL-WR841ND devices running firmware versions up to and including 20240920.
Can CVE-2024-9284 lead to remote code execution?
Yes, the stack-based buffer overflow vulnerability in CVE-2024-9284 may allow remote attackers to execute arbitrary code.