ZDI-22-081: TP-Link TL-WA1201 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-22-081?
The severity of ZDI-22-081 is critical as it allows remote attackers to execute arbitrary code on affected devices.
How do I fix ZDI-22-081?
To fix ZDI-22-081, update your TP-Link TL-WA1201 wireless access points to the latest firmware version provided by TP-Link.
Is authentication required to exploit ZDI-22-081?
No, authentication is not required to exploit ZDI-22-081, making it particularly dangerous.
What types of devices are affected by ZDI-22-081?
ZDI-22-081 specifically affects TP-Link TL-WA1201 wireless access points.
How can I determine if my device is vulnerable to ZDI-22-081?
You can determine if your device is vulnerable to ZDI-22-081 by checking if it is running an outdated firmware version that is known to be susceptible to this exploit.