ZDI-CAN-14656: TP-Link TL-WA1201 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 wireless access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-14656?
The severity of ZDI-CAN-14656 is high due to its potential for remote code execution without authentication.
How do I fix ZDI-CAN-14656?
To fix ZDI-CAN-14656, it is recommended to apply the latest firmware updates provided by TP-Link for the TL-WA1201.
Who is affected by ZDI-CAN-14656?
ZDI-CAN-14656 affects all installations of TP-Link TL-WA1201 wireless access points.
Can ZDI-CAN-14656 be exploited without authentication?
Yes, ZDI-CAN-14656 can be exploited without any authentication, making it easier for attackers to target affected devices.
What type of vulnerability is ZDI-CAN-14656?
ZDI-CAN-14656 is a remote code execution vulnerability related to the handling of DNS responses.