ZDI-CAN-14655: TP-Link Archer C90 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-14655?
ZDI-CAN-14655 has a critical severity level due to its potential for remote code execution without authentication.
How does ZDI-CAN-14655 affect TP-Link Archer C90 routers?
ZDI-CAN-14655 allows remote attackers to execute arbitrary code on affected TP-Link Archer C90 routers by exploiting a flaw in the handling of DNS responses.
Is authentication required to exploit ZDI-CAN-14655?
No, authentication is not required to exploit the vulnerability indicated by ZDI-CAN-14655.
What types of attacks can be executed using ZDI-CAN-14655?
Exploitation of ZDI-CAN-14655 can allow attackers to execute arbitrary code on the targeted TP-Link Archer C90 routers.
How can I mitigate the risks associated with ZDI-CAN-14655?
To mitigate ZDI-CAN-14655, ensure your TP-Link Archer C90 firmware is updated to the latest version provided by the manufacturer.