ZDI-22-080: TP-Link Archer C90 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-22-080?
The severity of ZDI-22-080 is high due to its potential to allow remote code execution without authentication.
How do I fix ZDI-22-080?
To fix ZDI-22-080, update your TP-Link Archer C90 router to the latest firmware version provided by TP-Link.
What devices are affected by ZDI-22-080?
The only affected device listed for ZDI-22-080 is the TP-Link Archer C90 router.
Can ZDI-22-080 be exploited remotely?
Yes, ZDI-22-080 can be exploited remotely as it does not require authentication.
What type of attack does ZDI-22-080 facilitate?
ZDI-22-080 facilitates remote code execution attacks through malicious DNS messages.