ZDI-23-1624: TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the atedtp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2023-39471.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1624?
The severity of ZDI-23-1624 is critical due to its potential for remote code execution without authentication.
How do I fix ZDI-23-1624?
To fix ZDI-23-1624, update the firmware of your TP-Link TL-WR841N router to the latest version provided by TP-Link.
Who is affected by ZDI-23-1624?
ZDI-23-1624 affects users of the TP-Link TL-WR841N routers that have not been updated to secure firmware.
Can ZDI-23-1624 be exploited remotely?
Yes, ZDI-23-1624 can be exploited remotely by network-adjacent attackers without the need for authentication.
What is the nature of the vulnerability in ZDI-23-1624?
The vulnerability in ZDI-23-1624 is a code execution flaw within the ated_tp service of the affected router.